Reputation
Top tag
Next privilege 75 Rep.
Set bounties
Badges
7
Newest
 Informed
Impact
~2k people reached

  • 0 posts edited
  • 0 helpful flags
  • 7 votes cast
Apr
10
comment Why is port 443 (but not port 80) being exposed to nmap when iptables is configured to drop the traffic?
Makes sense, thanks for your help!
Apr
10
awarded  Informed
Apr
10
comment Why is port 443 (but not port 80) being exposed to nmap when iptables is configured to drop the traffic?
You were right, iptables on the second box included iptables -t filter -A OUTPUT -m state --state INVALID -j DROP and changing iptables to not drop these packets eliminated the message. So nmap by default seems to be sending invalid packets when scanning port 443 but not other ports. I'm curious, how did you interpret the (somewhat cyrptic) nmap message to diagnose the issue to the source of the scan?
Apr
10
accepted Why is port 443 (but not port 80) being exposed to nmap when iptables is configured to drop the traffic?
Apr
9
asked Why is port 443 (but not port 80) being exposed to nmap when iptables is configured to drop the traffic?
Mar
22
accepted How are the routing tables populated on a Debian system?
Feb
19
asked How are the routing tables populated on a Debian system?
Feb
19
answered How are the routing tables populated on a Debian system?
Jan
2
comment How many bits of entropy per byte read from /dev/random and /dev/urandom?
Sorry, to clarify: data read from /dev/urandom can include any byte value, including bytes that could be interpreted as control characters in the shell, or bytes that wouldn't be valid to use in a URL, et cetera. So encoding / converting the random data into a hexadecimal representation allows the token to be used just about anywhere. Another way to do the conversion would be using something like Python's binascii.hexlify(data)
Jan
2
comment How many bits of entropy per byte read from /dev/random and /dev/urandom?
Data from /dev/urandom includes bytes 0-255 and encoding that data using a hex digest is one way to get the data into a format that plays well with other applications.
Jan
2
comment How many bits of entropy per byte read from /dev/random and /dev/urandom?
The hash in this case is just an easy way to generate a fixed length hex digest.
Jan
2
comment How many bits of entropy per byte read from /dev/random and /dev/urandom?
Thanks for the clarification! Do you know any references discussing /dev/random vs /dev/urandom?
Dec
31
asked How many bits of entropy per byte read from /dev/random and /dev/urandom?
Dec
31
awarded  Supporter
Nov
17
comment Apache 2.4 reload succeeds but restart fails when using SSL
I am seeing log messages from Apache, but as best I can tell there are no helpful errors or warnings in /var/log/syslog, /var/log/apache2/errors.log, or /var/log/apache2/secure.example.com/errors.log.
Nov
17
comment Apache 2.4 reload succeeds but restart fails when using SSL
Results are identical whether testing with one or several SSL listeners.
Nov
17
comment Apache 2.4 reload succeeds but restart fails when using SSL
The directives that trigger the restart failure are SSLCertificateChainFile , SSLCertificateFile, SSLCertificateKeyFile, SSLEngine.
Nov
17
asked Apache 2.4 reload succeeds but restart fails when using SSL
Oct
17
awarded  Editor
Oct
17
revised On Debian, how to audit installed packages against packages in a particular repository?
Updated `aptitude` command to use exact-match regular expressions.