AF:
NF:0
PS:10
SRH:1
SFN:
DSR:
MID:<20080307133343.3f4fe875@ripper.onstor.net>
CFG:
PT:0
S:andy.sharp@onstor.com
RQ:
SSV:onstor-exch02.onstor.net
NSV:
SSH:
R:<brian.baker@onstor.com>
MAID:1
X-Sylpheed-Privacy-System:
X-Sylpheed-Sign:0
SCF:#mh/Mailbox/sent
X-Sylpheed-End-Special-Headers: 1
Date: Fri, 7 Mar 2008 13:39:47 -0800
From: Andrew Sharp <andy.sharp@onstor.com>
To: Brian Baker <brian.baker@onstor.com>
Subject: ssh related stuff
Message-ID: <20080307133947.19d9b841@ripper.onstor.net>
Organization: Onstor
X-Mailer: Sylpheed-Claws 2.6.0 (GTK+ 2.8.20; x86_64-pc-linux-gnu)
Mime-Version: 1.0
Content-Type: multipart/mixed; boundary="MP_UWjPP0_b/wpYNO4X.TnvEtB"

--MP_UWjPP0_b/wpYNO4X.TnvEtB
Content-Type: text/plain; charset=US-ASCII
Content-Transfer-Encoding: 7bit
Content-Disposition: inline

Hi Brian,

Between the last time I logged in through ssh last week, and the first
time I logged in this week, which was Monday morning, something changed
on the ssh gateway machine that killed X11 forwarding.  That's an
essential part of using this facility, so we need to get that
restored.  I noticed that xauth isn't on the machine, so perhaps you
removed all X related packages?  xauth is in xbase-clients package, but
perhaps there are other things involved as well, I don't know.

I'm attaching a copy of the log-watcher script I use at home in case
you were interested in it.  Its basic scheme is to firewall any IP
address from which someone tries to log into a bogus user name.  We
probably can't use that at Onstor because if you mistype your user
name, you're toast until that rule can be removed from the firewall.
More likely you just would want it to send you an email or something.
If you want to use it at all.

Cheers,

a

--MP_UWjPP0_b/wpYNO4X.TnvEtB
Content-Type: application/x-shellscript; name=watch_auth.sh
Content-Transfer-Encoding: base64
Content-Disposition: attachment; filename=watch_auth.sh
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--MP_UWjPP0_b/wpYNO4X.TnvEtB--
