Here is a patched tarball of the grsecurity 2.6.22.9 fixed against the new vmslice exploit. This is the last known kernel to work with CSF as they have not updated it yet to work with 2.6.23 and up, With this new patch it should be secure as grsecurity normally is
64 bit
http://nix101.com/kernels/linux-2.6.22.9-grsec-x86_64-fixed-vmslice.tar.gz
32 bit
http://nix101.com/kernels/linux-2.6.22.9-grsec-i686-fixed-vmslice.tar.gz
I dont guarantee anything [...]

Continue reading...

About all the info, some fixes and some updated kernel packages are on this post.
http://www.webhostingtalk.com/showthread.php?t=670497
Here are some mirrors to erek’s fixed rpms from http://erek.blumenthals.com/blog/
i686:
http://nix101.com/erek/kernel-2.6.18-53.1.7.el5.erek.i686.rpm
http://nix101.com/erek/kernel-devel-2.6.18-53.1.7.el5.erek.i686.rpm
i688-PAE:
http://nix101.com/erek/kernel-PAE-2.6.18-53.1.7.el5.erek.i686.rpm
http://nix101.com/erek/kernel-PAE-devel-2.6.18-53.1.7.el5.erek.i686.rpm
x86_64:
http://nix101.com/erek/kernel-2.6.18-53.1.7.el5.erek.x86_64.rpm
http://nix101.com/erek/kernel-devel-2.6.18-53.1.7.el5.erek.x86_64.rpm
Source:
http://nix101.com/erek/kernel-2.6.18-53.1.7.el5.erek.src.rpm

Continue reading...

As always Im learning the more advanced features of iptables. Lately I have been using the ttl, string, and length matches. Here are some examples:
String Match
Suppose you have a site under a get, cc, or other http attack. Lets say they are hitting GET index.php. Here is what you can do, may be only a [...]

Continue reading...