- WLUG - wlug.mailman3.com

RE: [Wlug] Vunerable Machine

by Stephen C. Daukas

OK - another is a series of product recomendation questions... Anyone have a favorite graphical threaded email reader that supports multiple POPs and/or IMAP? This, of course, excludes Netscape (can't have multiple POPs nor a mix of POP and IMAP accounts). I'm currently using the KDE mail app that comes with RedHat 6.2 (will be upgrading to RH 7.1 in about 10 minutes), but it isn't exactly stellar... You can't do much of anything while it cheks for new mail, and it isn't threaded. Regards, Steve ______________________________ Stephen C. Daukas stephen(a)daukas.com (508) 845-9809 - Home (508) 845-5015 - Fax (508) 612-2149 - Mobile

Oct. 5, 2001

RE: [Wlug] Vunerable Machine

by Long, Mike

If you can determine that the machine has not been hacked then you could bring up the security holes you found to the big-wigs in the following way. The decision to use Linux was a very good one. Machine X was configured in a way that left it vulnerable to being compromised. However, because it is a Linux box and not a windows box it has not been compromised so far. The techniques for compromising a Linux server are more complex than those used to compromise a windows server. Since the tools for securing a Linux server are much more robust than those used to secure a windows server it will be virtually impossible to compromise the companies network through this server once it has been properly configured. A little spin can go a long way. :) Mike -----Original Message----- From: Marc Hughes [mailto:hughesm@tomsnyder.com] Sent: Friday, October 05, 2001 1:53 PM To: wlug(a)mail.wlug.org Subject: RE: [Wlug] Vunerable Machine On Fri, 2001-10-05 at 13:40, Keller, Tim wrote: > step 1: Change the root password Done > step 2: Remove all those "holy" services Done > step 3: Install SSH Still have to do ... getting weird library conflicts > step 4: Firewall the machine so that it only accepts SMTP traffic from the > outside world and SSH traffic from a couple of specific addresses TODO > step 5: Use a tool like tripwire to make a snapshot, wait a week, rerun it > again and see if anything changes. > Good, but still, how do I tell if it's already been rooted by 3l33t h4x0rs? And I guess an even bigger concern is the office politics things. How do I bring this to the big-wigs in a "good" light? _______________________________________________ Wlug mailing list Wlug(a)mail.wlug.org http://mail.wlug.org/mailman/listinfo/wlug

Oct. 5, 2001

Re: [Wlug] Vunerable Machine

by Josh Huber

Marc Hughes <hughesm(a)tomsnyder.com> writes: > To top it all off... this box is an old powerPC... Well, if it was an x86 box, it probably would have already been hacked. 99% of the tools out there are for exploiting buffer overflows on x86 machines. ttyl, -- Josh Huber

Oct. 5, 2001

RE: [Wlug] Vunerable Machine

by Marc Hughes

On Fri, 2001-10-05 at 13:40, Keller, Tim wrote: > step 1: Change the root password Done > step 2: Remove all those "holy" services Done > step 3: Install SSH Still have to do ... getting weird library conflicts > step 4: Firewall the machine so that it only accepts SMTP traffic from the > outside world and SSH traffic from a couple of specific addresses TODO > step 5: Use a tool like tripwire to make a snapshot, wait a week, rerun it > again and see if anything changes. > Good, but still, how do I tell if it's already been rooted by 3l33t h4x0rs? And I guess an even bigger concern is the office politics things. How do I bring this to the big-wigs in a "good" light?

Oct. 5, 2001

RE: [Wlug] Vunerable Machine

by Keller, Tim

step 1: Change the root password step 2: Remove all those "holy" services step 3: Install SSH step 4: Firewall the machine so that it only accepts SMTP traffic from the outside world and SSH traffic from a couple of specific addresses step 5: Use a tool like tripwire to make a snapshot, wait a week, rerun it again and see if anything changes. just some ideas... Tim. -----Original Message----- From: Marc Hughes [mailto:hughesm@tomsnyder.com] Sent: Friday, October 05, 2001 1:08 PM To: wlug(a)wlug.org Subject: [Wlug] Vunerable Machine Picture This: You're sitting at your desk on a warm friday morning. You get a call from the webmaster about a linux box, so you head over to help him out. The webmaster is a bright guy, but a microsoft guy. Very little linux experience at all, in fact the box was set up for him by someone no longer in the company. After figuring out what this box does (acts as a sendmail SMTP & pop3 server for bulk newletters... [not spam] ) you realize it has easily guessable passwords, is outside the firewall, and is running at least one vunerable service (an old POP2 daemon) and some questionable services (sun RPC and appletalk). To top it all off... this box is an old powerPC... My question: What should I do to make sure it hasn't been already cracked? Other Problems: I don't have to time to do a reinstall and set it up correctly anytime soon (maybe in a week I could). It needs to continue working like it has for at least another week (we just sent out a newsletter, and it processes remove requests that trickle in) To free up disk space, the logs were regularly deleted... no current logs exist. It's not my box, so I need to be sensitive of the office politics so no one says something like, "Well, since we can't secure linux, NO MORE LINUX" -Marc _______________________________________________ Wlug mailing list Wlug(a)mail.wlug.org http://mail.wlug.org/mailman/listinfo/wlug

Oct. 5, 2001

Vunerable Machine

by Marc Hughes

Picture This: You're sitting at your desk on a warm friday morning. You get a call from the webmaster about a linux box, so you head over to help him out. The webmaster is a bright guy, but a microsoft guy. Very little linux experience at all, in fact the box was set up for him by someone no longer in the company. After figuring out what this box does (acts as a sendmail SMTP & pop3 server for bulk newletters... [not spam] ) you realize it has easily guessable passwords, is outside the firewall, and is running at least one vunerable service (an old POP2 daemon) and some questionable services (sun RPC and appletalk). To top it all off... this box is an old powerPC... My question: What should I do to make sure it hasn't been already cracked? Other Problems: I don't have to time to do a reinstall and set it up correctly anytime soon (maybe in a week I could). It needs to continue working like it has for at least another week (we just sent out a newsletter, and it processes remove requests that trickle in) To free up disk space, the logs were regularly deleted... no current logs exist. It's not my box, so I need to be sensitive of the office politics so no one says something like, "Well, since we can't secure linux, NO MORE LINUX" -Marc

Oct. 5, 2001

Issue with CD's...

by Keller, Tim

Hey All, I was able to make the cds with random linux stuff on them, but my other jobs to make the redhat cds and the debian cds got dropped because legitimate orders had to be run... So if people have the Redhat 7.1 and the Debian cd's bring them along. BTW, I've already scheduled an hour to use the burner to make the 10 copies for Staroffice so I should have them for the wlug meeting. Sorry for the screw up. Tim.

Oct. 4, 2001

Re: [Wlug] StarOffice 6.0beta

by Andy Stewart

On Wednesday 03 October 2001 07:52 am, you wrote: > Andy, that would be great. > > If people are interested, I could throw it in the bulk copier and bring > 20 copies to the wlug meeting. > > Tim. Sure, why not? > > -----Original Message----- > From: Andy Stewart [mailto:andystewart@mediaone.net] > Sent: Tuesday, October 02, 2001 8:12 PM > To: wlug(a)mail.wlug.org > Subject: [Wlug] StarOffice 6.0beta > > > > Should I bring a few copies of this to the Install Fest on Thursday? -- Andy Stewart Founder Worcester Linux Users' Group Worcester, MA, USA http://www.wlug.org

Oct. 3, 2001

RE: [Wlug] StarOffice 6.0beta

by Keller, Tim

Andy, that would be great. If people are interested, I could throw it in the bulk copier and bring 20 copies to the wlug meeting. Tim. -----Original Message----- From: Andy Stewart [mailto:andystewart@mediaone.net] Sent: Tuesday, October 02, 2001 8:12 PM To: wlug(a)mail.wlug.org Subject: [Wlug] StarOffice 6.0beta Should I bring a few copies of this to the Install Fest on Thursday? -- Andy Stewart Founder Worcester Linux Users' Group Worcester, MA, USA http://www.wlug.org _______________________________________________ Wlug mailing list Wlug(a)mail.wlug.org http://mail.wlug.org/mailman/listinfo/wlug

Oct. 3, 2001

Re: [Wlug] StarOffice 6.0beta

by Jeffrey Michael Reed

On Tuesday 02 October 2001 20:11, Andy Stewart wrote: > Should I bring a few copies of this to the Install Fest > on Thursday? i would have to say HELL YEAH!!! :) -- ==//> Jeffrey Michael Reed ==//> Metro West Boston Linux User Group ==//> Co-founder/Administrator ==//> HTML, PHP, GNU/Linux ==//> ==//> Phunky Phresh stuff about... ==//> GNU/Linux, Hacking, Humor, ==//> Movies, Music, Programming, ==//> and Underground News about ==//> the Revolution... ==//> ==//> http://www.linuxbusca.com ==//> ==//> Favorite OS: Debian ==//> Favorite food: Lasagna ==//> Favorite brew: Guinness ==//> Favorite music: Mr. Bungle

Oct. 3, 2001

StarOffice 6.0beta

by Andy Stewart

Should I bring a few copies of this to the Install Fest on Thursday? -- Andy Stewart Founder Worcester Linux Users' Group Worcester, MA, USA http://www.wlug.org

Oct. 3, 2001

Re: [Wlug] Looking for input for Linux-based Server (Email, etc.)

by Stephen C. Daukas

At 04:52 PM 9/30/2007 -0400, you wrote: >"Stephen C. Daukas" wrote: [snip] >heya steve. > >i'm one of the guys who likes to lurk on the wlug mailing list. > >:) > > >try using postfix...my buddy and i are going to start using it on our >debian servers. it's pure GPL and it seems to work pretty swell! > Jeff - I see you are planning on hitting the Install Fest. If you make it there, I'd like to spend a few minutes talking about postfix, php, etc. Sound OK to you? Steve Stephen C. Daukas stephen(a)daukas.com (508) 845-9809 - Home (508) 845-5015 - Fax (508) 612-2149 - Mobile

Oct. 2, 2001

installfest?

by Jeffrey Michael Reed

hey doodz... oi...andy...i hear you met my other half...he's that whacky spaniard guy named christian...he used to work @ ScreamDesign? :) anyway, what's the dilly with the installfest? is it still on for wednesday night? hope so...that would be SWEET! i would like to attend. i would like to chug grog with fellow gear/penguin/devil heads. give me da heads up!!! peace and GOD BLESS THE FREAKIN' WORLD... terrorism sucks... -- ==//> Jeffrey Michael Reed ==//> Metro West Boston Linux User Group ==//> Co-founder/Administrator ==//> HTML, PHP, GNU/Linux ==//> ==//> Phunky Phresh stuff about... ==//> GNU/Linux, Hacking, Humor, ==//> Movies, Music, Programming, ==//> and Underground News about ==//> the Revolution... ==//> ==//> http://www.linuxbusca.com ==//> ==//> Favorite OS: Debian ==//> Favorite food: Lasagna ==//> Favorite brew: Guinness ==//> Favorite music: Mr. Bungle

Oct. 2, 2001

Re: [Wlug] *nix humor

by Robert L Krawitz

From: Andy Stewart <andystewart(a)mediaone.net> Date: Mon, 1 Oct 2001 18:53:08 -0400 The variant which I saw was: # chmod +x /bin/laden Or the slightly less obvious chmod 111 /bin/laden

Oct. 1, 2001

RE: [Wlug] Suggestions on CD drive cleaners?

by Mike

Isopropyl alcohol is common but I doubt the lenses are glass so I would be leery at best. Try a bit of dish detergent on a cotton swab then rinse with clean swabs then dry. Be gentile though, I'm not too sure about the strength of a lens mechanism! (they just don't make thing as they should any more!) Mike LaPointe Truck Driver, Wanna be net admin. > -----Original Message----- > From: wlug-admin(a)mail.wlug.org [mailto:wlug-admin@mail.wlug.org]On > Behalf Of Brian J. Conway > Sent: Monday, October 01, 2001 7:00 PM > To: wlug(a)mail.wlug.org > Subject: [Wlug] Suggestions on CD drive cleaners? > > > My 6X-generation DVD drive has only recently decided that it will no > longer read blue CD-Rs, but still reads pressed CDs and gold CD-Rs just > fine. As the blue CD-Rs are a less reflective surface, I figured the > lense might be a bit dusty and I should try cleaning the thing out (the > CDs themselves are fine). Any suggestions on cleaning such a thing? > Blowing a can of compressed air in the drive opening wasn't too effective. > ;-) > > Brian J. Conway > dogbert(a)clue4all.net > > "LINUX is obsolete" > - Andrew S. Tanenbaum, creator of Minix - Jan 29, 1992 > _______________________________________________ > Wlug mailing list > Wlug(a)mail.wlug.org > http://mail.wlug.org/mailman/listinfo/wlug >

Oct. 1, 2001

Suggestions on CD drive cleaners?

by Brian J. Conway

My 6X-generation DVD drive has only recently decided that it will no longer read blue CD-Rs, but still reads pressed CDs and gold CD-Rs just fine. As the blue CD-Rs are a less reflective surface, I figured the lense might be a bit dusty and I should try cleaning the thing out (the CDs themselves are fine). Any suggestions on cleaning such a thing? Blowing a can of compressed air in the drive opening wasn't too effective. ;-) Brian J. Conway dogbert(a)clue4all.net "LINUX is obsolete" - Andrew S. Tanenbaum, creator of Minix - Jan 29, 1992

Oct. 1, 2001

Re: [Wlug] *nix humor

by Andy Stewart

The variant which I saw was: # chmod +x /bin/laden On Monday 01 October 2001 01:41 pm, Tim Trachimowicz wrote: > thinkgeek already has that on t-shirts. pretty funny. > > --track > > > > From: Bill Mills-Curran <subssn594(a)charter.net> > > >Reply-To: wlug(a)mail.wlug.org > >To: Worcester Linux Users Group <wlug(a)mail.wlug.org> > >Subject: [Wlug] *nix humor > >Date: Mon, 1 Oct 2001 11:52:31 -0400 (EDT) > > > >Seen on an I495 bumper: > > > > rm -rf /bin/laden > > > >Bill > > > >_______________________________________________ > >Wlug mailing list > >Wlug(a)mail.wlug.org > >http://mail.wlug.org/mailman/listinfo/wlug > > _________________________________________________________________ > Get your FREE download of MSN Explorer at > http://explorer.msn.com/intl.asp > > _______________________________________________ > Wlug mailing list > Wlug(a)mail.wlug.org > http://mail.wlug.org/mailman/listinfo/wlug -- Andy Stewart Founder Worcester Linux Users' Group Worcester, MA, USA http://www.wlug.org

Oct. 1, 2001

Re: [Wlug] next week's installfest

by Andy Stewart

HI Tim, This sounds really great - thanks! If you can get the KDE 2.2.1 rpms, that might be something to put onthe "others" CD. Andy On Monday 01 October 2001 08:39 am, you wrote: > This is what I plan on bringing. > > 1. 5 sets of Redhat 7.1 > 2. 5 sets of Debian 2.2rev3 > 3. 10 cd's with the following.. > a. latest kernel/modtools (2.4.10) > b. StarOffice > c. latest mozilla benchmark (0.9.4) > > If anybody has some input on what else I should put on the "others" cd, > let me know. > > Tim. > > -----Original Message----- > From: David Lee Ludwig [mailto:davidl@WPI.EDU] > Sent: Saturday, September 29, 2001 1:05 AM > To: 'wlug(a)mail.wlug.org' > Subject: RE: [Wlug] next week's installfest > > On Fri, 28 Sep 2001, Keller, Tim wrote: > > What you might want todo is just grab everything; debs, rpms and > > tarballs. > > > > That way, not matter what distribution we load, we'd be able to > > install. > > I was planning on grabbing as much as I can, however each > version of each distribution has a different set of Ximian Gnome > packages that run around 225MB a piece. > > What CDs do people plan on bringing? -- Andy Stewart Founder Worcester Linux Users' Group Worcester, MA, USA http://www.wlug.org

Oct. 1, 2001

Stuff for sale...

by John Stoffel

Hi guys, I've ust bought a new (to me!) system, a dual PIII 550mhz Xeon system with 512mb of ram, graphics and some raid stuff. It's a Dell Precision 610 workstation. Very nice box. It came with a Adaptec ALO-1130U RAIDport PCI card with 16mb of ram. Unfortunately its unusable with Linux. Anyone interested in this card for their Windows server? Drivers are available, and it does work, since it passes the bios boot stuff. I've also got a video board that I want to get rid of, its a paired set of full length boards, one AGP, one PCI hooked together. It's an "Intense3d Wildcat 4000" board, and it's supposed to be a screammer with OpenGL. 64mb of video ram, etc. And of course, no Linux drivers. It does work under Linux as an X display, but since the boards are full size, I've decided to go with my AGP G450 instead. Much smaller. *grin* And it's better supported. So I realize you guys might not be too interested in this stuff, but if you do know of anyone who is looking for stuff like this, please let me know. Right now I'm looking for a good high quality KVM switch with ideally four ports. Something that can talk to a MAC and Sun as well as PCs would be ideal. Willing to trade! I'll also have some other stuff available down the line, like a pair of matched PIII 450mhz processors and possibly a case with possibly broken motherboard to pass on for free. Other odds and ends, send me email if you're looking and I'll see what I can find. John

Oct. 1, 2001

Re: [Wlug] *nix humor

by Tim Trachimowicz

thinkgeek already has that on t-shirts. pretty funny. --track >From: Bill Mills-Curran <subssn594(a)charter.net> >Reply-To: wlug(a)mail.wlug.org >To: Worcester Linux Users Group <wlug(a)mail.wlug.org> >Subject: [Wlug] *nix humor >Date: Mon, 1 Oct 2001 11:52:31 -0400 (EDT) > >Seen on an I495 bumper: > > rm -rf /bin/laden > >Bill > >_______________________________________________ >Wlug mailing list >Wlug(a)mail.wlug.org >http://mail.wlug.org/mailman/listinfo/wlug _________________________________________________________________ Get your FREE download of MSN Explorer at http://explorer.msn.com/intl.asp

Oct. 1, 2001

*nix humor

by Bill Mills-Curran

Seen on an I495 bumper: rm -rf /bin/laden Bill

Oct. 1, 2001

RE: [Wlug] next week's installfest

by Keller, Tim

This is what I plan on bringing. 1. 5 sets of Redhat 7.1 2. 5 sets of Debian 2.2rev3 3. 10 cd's with the following.. a. latest kernel/modtools (2.4.10) b. StarOffice c. latest mozilla benchmark (0.9.4) If anybody has some input on what else I should put on the "others" cd, let me know. Tim. -----Original Message----- From: David Lee Ludwig [mailto:davidl@WPI.EDU] Sent: Saturday, September 29, 2001 1:05 AM To: 'wlug(a)mail.wlug.org' Subject: RE: [Wlug] next week's installfest On Fri, 28 Sep 2001, Keller, Tim wrote: > What you might want todo is just grab everything; debs, rpms and tarballs. > > That way, not matter what distribution we load, we'd be able to install. I was planning on grabbing as much as I can, however each version of each distribution has a different set of Ximian Gnome packages that run around 225MB a piece. What CDs do people plan on bringing? -- David Ludwig | "The Linux philosophy is laugh in the face of davidl<at>wpi.edu | danger. Oops. Wrong One. 'Do it yourself.' http://www.wpi.edu/~davidl | That's it." - Linus Torvalds _______________________________________________ Wlug mailing list Wlug(a)mail.wlug.org http://mail.wlug.org/mailman/listinfo/wlug

Oct. 1, 2001

Unix Timezone Settings

by cc.noyes

Some Unix's (SCO Unixware for one...) uses a timezone setting in /etc/TZ. What's the relationship between the timezone setting and the local time? I assume the timezone is set to the local timezone (in our case GMT+5 or US/EASTERN), but what about setting the local time? Should I set it to GMT and let the timezone offset make the adjustment to the correct local time, or do I set the local time to the correct local time? And if I do that, what's the purpose of the timezone setting? I can't find where Linux uses a timezone setting. Thanks, Chuck

Oct. 1, 2001

Looking for input for Linux-based Server (Email, etc.)

by Stephen C. Daukas

Greetings all! I am about to do away with my hosting provider and plan on migrating services over to my own Linux box. It currently runs RedHat 6.2 and I plan to upgrade this soon (hopefully at the upcoming install fest). I have a static IP with a LinkSys router... I want to run the usual suspects (web, email, etc.) and was wondering what free packages were out there. I'm planning on Apache, DNS, and so on, but my real question is regarding Email... I'd like to be able to easily manage the service. I used to "do sendmail" years ago (including majordomo et. al), and even got a server up and running for a few weeks last year while between ISPs, but sendmail is definitely created for those who "enjoy the trip" instead of just getting to the end results. Does anyone know of an email package that provides for easy config management, user management, SPAM filtering, perhaps a web-based interface for remote access, etc.? Thanks in advance! Regards, Steve -- Stephen C. Daukas stephen(a)daukas.com (508) 845-9809 - Home (508) 845-5015 - Fax (508) 612-2149 - Mobile

Oct. 1, 2001

Re: [Wlug] Install fest with WPILA on Thursday!

by Stephen C. Daukas

At 06:33 PM 9/30/2001 -0400, Our Founder wrote: >Hi everybody, [snip] >I am, however, lacking in RSVPs from prospective installees. If you wish >to have Linux installed on your machine, please send me an e-mail so that >I can handle the logistics. Hi Andy! I am putting together a Linux server for serving up two web sites, email, etc., for my own personal use (tired of paying XO) and hope to build this at the install fest. I also hope to install RedHat onto a Dell Latitude CPx Laptop. The Server already has RedHat 6.2 on it, so I suspect the latest RedHat distro will not be a problem. The Laptop is anyone's guess... But - I realize that there may not be enough room/time for my stuff... Regards, Steve -- Stephen C. Daukas stephen(a)daukas.com (508) 845-9809 - Home (508) 845-5015 - Fax (508) 612-2149 - Mobile

Oct. 1, 2001