- WLUG - wlug.mailman3.com

Email reader...
by Stephen C. Daukas 08 Oct '01

08 Oct '01

Well, as it turns out, the version of KMail that comes with RH 7.1 is threaded, and very different from the version included with RH 6.2. So far, a pretty good mailer... Still interested in your recommendations! -- Stephen C. Daukas stephen(a)daukas.com (508) 845-9809 - Home (508) 845-5015 - Fax (508) 612-2149 - Mobile

3 2

RedHat Apps CD
by Bill Mills-Curran 05 Oct '01

05 Oct '01

I'm trying to burn a CD from the RedHat 7.1 distro. However the CD has a bunch of hardlinked files that, if the files get copied as duplicates instead of hardlinks, makes the CD too big. The mkisofs command generates copies. I'm going to try to mount the iso image file and manipulate it manually, but I don't know if this is right. Suggestions? Thanks, Bill

2 1

RE: [Wlug] Vunerable Machine
by Keller, Tim 05 Oct '01

05 Oct '01

step 1: Change the root password step 2: Remove all those "holy" services step 3: Install SSH step 4: Firewall the machine so that it only accepts SMTP traffic from the outside world and SSH traffic from a couple of specific addresses step 5: Use a tool like tripwire to make a snapshot, wait a week, rerun it again and see if anything changes. just some ideas... Tim. -----Original Message----- From: Marc Hughes [mailto:hughesm@tomsnyder.com] Sent: Friday, October 05, 2001 1:08 PM To: wlug(a)wlug.org Subject: [Wlug] Vunerable Machine Picture This: You're sitting at your desk on a warm friday morning. You get a call from the webmaster about a linux box, so you head over to help him out. The webmaster is a bright guy, but a microsoft guy. Very little linux experience at all, in fact the box was set up for him by someone no longer in the company. After figuring out what this box does (acts as a sendmail SMTP & pop3 server for bulk newletters... [not spam] ) you realize it has easily guessable passwords, is outside the firewall, and is running at least one vunerable service (an old POP2 daemon) and some questionable services (sun RPC and appletalk). To top it all off... this box is an old powerPC... My question: What should I do to make sure it hasn't been already cracked? Other Problems: I don't have to time to do a reinstall and set it up correctly anytime soon (maybe in a week I could). It needs to continue working like it has for at least another week (we just sent out a newsletter, and it processes remove requests that trickle in) To free up disk space, the logs were regularly deleted... no current logs exist. It's not my box, so I need to be sensitive of the office politics so no one says something like, "Well, since we can't secure linux, NO MORE LINUX" -Marc _______________________________________________ Wlug mailing list Wlug(a)mail.wlug.org http://mail.wlug.org/mailman/listinfo/wlug

6 5

RE: [Wlug] Vunerable Machine
by Long, Mike 05 Oct '01

05 Oct '01

If you can determine that the machine has not been hacked then you could bring up the security holes you found to the big-wigs in the following way. The decision to use Linux was a very good one. Machine X was configured in a way that left it vulnerable to being compromised. However, because it is a Linux box and not a windows box it has not been compromised so far. The techniques for compromising a Linux server are more complex than those used to compromise a windows server. Since the tools for securing a Linux server are much more robust than those used to secure a windows server it will be virtually impossible to compromise the companies network through this server once it has been properly configured. A little spin can go a long way. :) Mike -----Original Message----- From: Marc Hughes [mailto:hughesm@tomsnyder.com] Sent: Friday, October 05, 2001 1:53 PM To: wlug(a)mail.wlug.org Subject: RE: [Wlug] Vunerable Machine On Fri, 2001-10-05 at 13:40, Keller, Tim wrote: > step 1: Change the root password Done > step 2: Remove all those "holy" services Done > step 3: Install SSH Still have to do ... getting weird library conflicts > step 4: Firewall the machine so that it only accepts SMTP traffic from the > outside world and SSH traffic from a couple of specific addresses TODO > step 5: Use a tool like tripwire to make a snapshot, wait a week, rerun it > again and see if anything changes. > Good, but still, how do I tell if it's already been rooted by 3l33t h4x0rs? And I guess an even bigger concern is the office politics things. How do I bring this to the big-wigs in a "good" light? _______________________________________________ Wlug mailing list Wlug(a)mail.wlug.org http://mail.wlug.org/mailman/listinfo/wlug

1 0

Issue with CD's...
by Keller, Tim 04 Oct '01

04 Oct '01

Hey All, I was able to make the cds with random linux stuff on them, but my other jobs to make the redhat cds and the debian cds got dropped because legitimate orders had to be run... So if people have the Redhat 7.1 and the Debian cd's bring them along. BTW, I've already scheduled an hour to use the burner to make the 10 copies for Staroffice so I should have them for the wlug meeting. Sorry for the screw up. Tim.

1 0

RE: [Wlug] StarOffice 6.0beta
by Keller, Tim 03 Oct '01

03 Oct '01

Andy, that would be great. If people are interested, I could throw it in the bulk copier and bring 20 copies to the wlug meeting. Tim. -----Original Message----- From: Andy Stewart [mailto:andystewart@mediaone.net] Sent: Tuesday, October 02, 2001 8:12 PM To: wlug(a)mail.wlug.org Subject: [Wlug] StarOffice 6.0beta Should I bring a few copies of this to the Install Fest on Thursday? -- Andy Stewart Founder Worcester Linux Users' Group Worcester, MA, USA http://www.wlug.org _______________________________________________ Wlug mailing list Wlug(a)mail.wlug.org http://mail.wlug.org/mailman/listinfo/wlug

2 1

StarOffice 6.0beta
by Andy Stewart 03 Oct '01

03 Oct '01

Should I bring a few copies of this to the Install Fest on Thursday? -- Andy Stewart Founder Worcester Linux Users' Group Worcester, MA, USA http://www.wlug.org

2 1

Install fest with WPILA on Thursday!
by Andy Stewart 02 Oct '01

02 Oct '01

Hi everybody, We will be having an install fest at WPI on Thursday, October 4th from 6 - 10 PM. I have several folks who have volunteered to make CDs and be installers - thanks gang! The main target of this install fest is the WPI community, but I won't turn away folks in need as long as there is room. I am, however, lacking in RSVPs from prospective installees. If you wish to have Linux installed on your machine, please send me an e-mail so that I can handle the logistics. Let's get the word out and hope for a great turnout! Later, Andy -- Andy Stewart Founder Worcester Linux Users' Group Worcester, MA, USA http://www.wlug.org

3 4

installfest?
by Jeffrey Michael Reed 02 Oct '01

02 Oct '01

hey doodz... oi...andy...i hear you met my other half...he's that whacky spaniard guy named christian...he used to work @ ScreamDesign? :) anyway, what's the dilly with the installfest? is it still on for wednesday night? hope so...that would be SWEET! i would like to attend. i would like to chug grog with fellow gear/penguin/devil heads. give me da heads up!!! peace and GOD BLESS THE FREAKIN' WORLD... terrorism sucks... -- ==//> Jeffrey Michael Reed ==//> Metro West Boston Linux User Group ==//> Co-founder/Administrator ==//> HTML, PHP, GNU/Linux ==//> ==//> Phunky Phresh stuff about... ==//> GNU/Linux, Hacking, Humor, ==//> Movies, Music, Programming, ==//> and Underground News about ==//> the Revolution... ==//> ==//> http://www.linuxbusca.com ==//> ==//> Favorite OS: Debian ==//> Favorite food: Lasagna ==//> Favorite brew: Guinness ==//> Favorite music: Mr. Bungle

1 0

Re: [Wlug] *nix humor
by Tim Trachimowicz 01 Oct '01

01 Oct '01

thinkgeek already has that on t-shirts. pretty funny. --track >From: Bill Mills-Curran <subssn594(a)charter.net> >Reply-To: wlug(a)mail.wlug.org >To: Worcester Linux Users Group <wlug(a)mail.wlug.org> >Subject: [Wlug] *nix humor >Date: Mon, 1 Oct 2001 11:52:31 -0400 (EDT) > >Seen on an I495 bumper: > > rm -rf /bin/laden > >Bill > >_______________________________________________ >Wlug mailing list >Wlug(a)mail.wlug.org >http://mail.wlug.org/mailman/listinfo/wlug _________________________________________________________________ Get your FREE download of MSN Explorer at http://explorer.msn.com/intl.asp

5 4