- WLUG - wlug.mailman3.com

RE: [Wlug] Firewalls
by Dibb, Jim April 9, 2001

April 9, 2001

Upgrade to 1.38.4 firmware, I've found it to work the best. It's beta firmware, I got it from the Linksys forum on dslreports.com. http://www.dslreports.com/forum/remark%2c651534%3broot=equip%2c16%3bmode=fla t That forum is an excellent resource for the Linksys hardware. I've never used it, but I'm sure there is a way to set up logging by the router to a file on one of your machines. -----Original Message----- From: Michael Long [mailto:michaellong@charter.net] Sent: Sunday, April 08, 2001 12:14 AM To: wlug(a)mail.wlug.org Subject: Re: [Wlug] Firewalls Your suggestion of an appliance was a magnificent one. I bought a Linksys router and had it running in a very short period of time. Now for the $64 question...how do I monitor my network to minimize the chance of attack or at least know when my system has been compromised? -mike On Wednesday 04 April 2001 00:09, you wrote: > > After spending many hours this past week trying to understand ipchains > > and firewalling in general I have come to the conclusion that I am > > spending a lot of time trying to recreate something that probably already > > exists. Does anyone have any experience with either open source or > > commercial firewalling products that can be configured to work in a small > > office network and allow VPN connections to larger networks. I do not > > have a very big budget but would be willing to pay for the appropriate > > solution. > > > > Mike > > Might I suggest an appliance? D-Link, SMC, NetGear and LinkSys all > have them for just a hair over $100 provided you're sitting on a Cable > or DSL connection. My SMC is web managable and does a lovely job. > It also has a COM port so I can use it with dial-up networks if I > have to. IPCHAINS/IPTABLES is cool, but you need to patch for IPSEC > support in 2.2.x kernels. > > ccb > > > -- > Charles C. Bennett, Jr. VA LiNUX Systems > Systems Engineer, Northeast US 25 Burlington Mall Rd., Suite 300 > +1 617 543-6513 Burlington, MA 01803-4145 > ccb(a)valinux.com www.valinux.com > _______________________________________________ > Wlug mailing list > Wlug(a)mail.wlug.org > http://mail.wlug.org/mailman/listinfo/wlug _______________________________________________ Wlug mailing list Wlug(a)mail.wlug.org http://mail.wlug.org/mailman/listinfo/wlug

1 0

just a bit-o-fun
by Terry Yelmene April 8, 2001

April 8, 2001

A year ago last Thursday I was strolling in the zoo When I met a man Who thought he knew the lot. He was laying down the law About the habits of baboons And the number of quills a porcupine has got So I asked him "what's that creature there?" He answered, "Ooh, It's a h'elk" I might have gone on thinking that was true If the animal in question hadn't Put that chap to shame and said "I hain't a h'elk" I'm a Gnu I'm a Gnu I'm a Gnu How do you do? You really ought to k-now w-who's who I'm a Gnu Spelled G-N-U I'm g-not a camel or a kangaroo So let me introduce I'm g-neither man or moose Oh G-no, G-no, G-no I'm a Gnu I had taken furnished lodgings down at Rustington-on-Sea Whence I travelled on to Ashton-under-Lyme And the second night I stayed there I was wakened from a dream Which I'll tell you all about some other time. Among the hunting trophies on the wall above my head Stuffed and mounted was a face I thought I knew; A bison, no it's not a bison An okapi, I don't think it's an okapi Could it be a hartebeest? When I seemed to hear a voice I'm a Gnu I'm a Gnu A g-nother Gnu I wish I could g-nash my teeth at you I'm a Gnu How do you do? You really ought to k-now w-who's who I'm a Gnu Spelled G-N-U Call me bison or okapi and I'll sue G-nor am I in the least like that dreadful hartebeest Oh G-No G-No G-No I'm a Gnu! **************** The source for this definitely wants to remain anonymous- but... I had to share it with you cause, now I@m a Gnu Too! ...(just between us Gnus & Penguins)

2 2

Re: [Wlug] Firewalls
by ccb＠acm.org April 8, 2001

April 8, 2001

> After spending many hours this past week trying to understand ipchains and > firewalling in general I have come to the conclusion that I am spending a lot > of time trying to recreate something that probably already exists. Does > anyone have any experience with either open source or commercial firewalling > products that can be configured to work in a small office network and allow > VPN connections to larger networks. I do not have a very big budget but would > be willing to pay for the appropriate solution. > > Mike Might I suggest an appliance? D-Link, SMC, NetGear and LinkSys all have them for just a hair over $100 provided you're sitting on a Cable or DSL connection. My SMC is web managable and does a lovely job. It also has a COM port so I can use it with dial-up networks if I have to. IPCHAINS/IPTABLES is cool, but you need to patch for IPSEC support in 2.2.x kernels. ccb -- Charles C. Bennett, Jr. VA LiNUX Systems Systems Engineer, Northeast US 25 Burlington Mall Rd., Suite 300 +1 617 543-6513 Burlington, MA 01803-4145 ccb(a)valinux.com www.valinux.com

2 1

[Fwd: LOCAL: Worcester (MA, USA) Linux Users' Group meeting]
by Andy Stewart April 8, 2001

April 8, 2001

-------- Original Message -------- Subject: LOCAL: Worcester (MA, USA) Linux Users' Group meeting Date: Fri, 6 Apr 2001 20:27:40 GMT From: Andy Stewart <andystewart(a)mediaone.net> Organization: Worcester Linux Users' Group Newsgroups: comp.os.linux.announce Followup-To: comp.os.linux.misc -----BEGIN PGP SIGNED MESSAGE----- HI everyone, The next meeting of the Worcester (MA, USA) Linux Users' Group will take place on Thursday, April 19th, at 7:00 PM. The meeting location is at WPI's Kinnicutt Hall in Worcester, MA. Directions can be found on the WLUG website: http://www.wlug.org The speaker at this meeting will be Bob Ziegler. Bob is the author of "Linux Firewalls", published by New Riders. Bob will address firewall related topics including: o What is contained in the IP, TCP, and UDP packet headers o A description of classic attacks o Basic things to be filtered The goal will be that someone should leave the meeting with an understanding of what a firewall can do and why you want one. More meeting information can be found on the WLUG website. This promises to be a really informative meeting! As always, WLUG meetings are open to the public. After the presentation, there will be an opportunity for Q/A, and then a couple of Linux related items will be raffled. Small donations of $2 - $5 are happily accepted (but not required) to help defray the cost of the refreshments at the meeting. After the meeting, you are welcome to join us at the Boynton Restaurant for pizza and beer. I'm looking forward to seeing alot of people at this meeting. See ya later, Andy - -- Andy Stewart, Founder -o) | "I was playing poker the other night ... Worcester Linux Users' Group /\ | with Tarot cards. I got a full house and Worcester, MA, USA _\_v | four people died." -- Steven Wright http://www.wlug.org | - -- This article has been digitally signed by the moderator, using PGP. http://www.iki.fi/mjr/cola-public-key.asc has PGP key for validating signature. Send submissions for comp.os.linux.announce to: linux-announce(a)news.ornl.gov PLEASE remember a short description of the software and the LOCATION. This group is archived at http://www.iki.fi/mjr/linux/cola.html -----BEGIN PGP SIGNATURE----- Version: 2.6.3ia Charset: latin1 iQCVAgUBOs4mvFrUI/eHXJZ5AQEhyQQAvvbtDWXY5iW6/m4kDYPjk4VuHLY/l276 JMz+9HA7MWTEwhK8i44lgN+Rt8+fV27TrAmOsT7kmrQGN+ckPMzzzjBraW9Xnp8p BBKYDZOOg0YonWYdZPBailYRPUgPwTT6ujiay9dQ7uR65rCUvG3UWRKrRmZDYqPJ X0NMd/kezk8= =rJuG -----END PGP SIGNATURE-----

2 1

Re: fwd: [Wlug] Filtering attachments via a Sendmail ruleset?
by Paul Lussier April 6, 2001

April 6, 2001

In a message dated: Thu, 05 Apr 2001 15:48:11 EDT Jeffry Smith said: >OK, I know we do something to "defang" stuff, could I / you pass what it >is on to this list, to answer this question? > >jeff >------- Forwarded Message > >From: "Dave Coutu" <cout(a)alum.wpi.edu> >To: <wlug(a)mail.wlug.org> >Date: Thu, 5 Apr 2001 11:10:10 -0700 >Subject: [Wlug] Filtering attachments via a Sendmail ruleset? > >Hey Guys, > > Really simple question here... A while back I had asked whether = >sendmail could filter out mail based on a subject header , and found out = >that it could. Now I have a situation here at work where we want to = >filter out attachments, the obvious being .vbs, .exe, basically anything = >that may contain a virus. We don't run anti-virus software on the mail = >server that mail is being delivered to, nor on the sendmail relays = >feeding into it, since they are Solaris boxes and we currently don't = >have a unix version of Norton lying about. But I believe that we can = >filter out attachments through a sendmail ruleset, and I am wondering if = >this is the case. If so, can someone tell me how/where to do it please? = > Would be very appreciative for any help here! Thanks in advance! What we do here is use procmail on our local, internal mail server. There's a great filtering set of procmail rules for this located at: http://www.impsec.org/email-tools/procmail-security.html As long as you have procmail installed and sendmail is configured to use procmail, just drop this stuff in place and you'll instantly start filtering stuff based on content and/or extension. There's a lot of configuration and customization you can do with this thing, and we've found that it works fantastic. We've intercepted the "AnnaKournikova" virus many, many times since it's initial release, and I can't even count the number of other virii I've seen trapped since we installed this. HTH, Seeya, Paul -- Paul Lussier Chairman, Nashua Chapter, GNHLUG Senior Systems and Network Engineer Mission Critical Linux, Inc.

3 2

Filtering attachments via a Sendmail ruleset?
by Dave Coutu April 5, 2001

April 5, 2001

Hey Guys, Really simple question here... A while back I had asked whether sendmail could filter out mail based on a subject header , and found out that it could. Now I have a situation here at work where we want to filter out attachments, the obvious being .vbs, .exe, basically anything that may contain a virus. We don't run anti-virus software on the mail server that mail is being delivered to, nor on the sendmail relays feeding into it, since they are Solaris boxes and we currently don't have a unix version of Norton lying about. But I believe that we can filter out attachments through a sendmail ruleset, and I am wondering if this is the case. If so, can someone tell me how/where to do it please? Would be very appreciative for any help here! Thanks in advance! Dave

3 2

Volunteers needed!
by Andy Stewart April 5, 2001

April 5, 2001

HI gang, I have been asked to be the guest speaker at the Delphi Developers Group meeting in Newton, MA on Monday, April 23rd (http://www.discom.com/delphi) They are interested in Linux due to the recent product announcement of Borland Kylix (http://www.borland.com/kylix) These folks are a group of software developers living in the Windows world. I had planned to prepare a 45 - 60 minute talk, Q/A, and then demonstrate some apps for them, such as: StarOffice Netscape Developer tools and utilities VmWare LILO Desktops - KDE, Gnome, enlightenment, etc. Installation of Linux The above list was suggested to me by their representative as a list of things that would be interesting to their developers group. I am seeking 2 or 3 people would like to volunteer to demo some of these tools at the meeting, and who can provide support for the questions which I can't answer. I'm looking for folks with systems or laptops that they are willing to bring to this meeting for the demos. I would also appreciate a volunteer or two who would be willing to critique my presentation slides before the meeting. You would not need to actually attend the meeting. I'd e-mail the slides to you and request your written feedback. The Delphi group representative will also get a sneak preview. If you are interested in either of these opportunities, please contact me this week if at all possible. Thanks in advance! Andy -- Andy Stewart, Founder -o) | Harris's Lament: All the good ones are Worcester Linux Users' Group /\ | taken. Worcester, MA, USA _\_v | http://www.wlug.org |

2 2

RE: [Wlug] Friendly ISP in Worcester
by Keller, Tim April 4, 2001

April 4, 2001

Well, I'm only on dialup and I've been using Erols (Its actually RCN) and I've had extremely good luck with them. Like everything, your mileage may very... Tim. -----Original Message----- From: Rodrigo Gomes [mailto:gomes_k@dr.com] Sent: Wednesday, April 04, 2001 5:18 PM To: wlug(a)mail.wlug.org Subject: [Wlug] Friendly ISP in Worcester I would like to know names and url of lnx friendly ISP's in Worcester area. Thanks in advance. ______________________________________________ FREE Personalized Email at Mail.com Sign up at http://www.mail.com/?sr=signup _______________________________________________ Wlug mailing list Wlug(a)mail.wlug.org http://mail.wlug.org/mailman/listinfo/wlug

2 1

Re: [Wlug] Friendly ISP in Worcester
by Richard H Fox April 4, 2001

April 4, 2001

I've used AT&T Worldnet with great success - much faster than other dialups... yes, the big mega-ISP but with Linux loving employees who I've spoken with for server / network related issues... how Linux friendly is AT&T??? Visit: http://www.wurd.com/eng/setup/dialers/index.htm There's other Linux stuff on the AT&T WURD site ( http://www.wurd.com ) - but I think this is what you are looking for... OH! if you want to sign up for a Linux account use this method: https://registration.att.net/cgi-bin/inregister Hit the CONTINUE REGISTRATION button - the nine-character Registration Code is not needed... The only way to avoid downloading the Wintel or MAC dialer to setup an AT&T account is through this page... and AT&T customer (tech) support forwarded me a Linux guy (Debian his preference though he runs Mandrake on one of his machines) who gave me the link, only available by direct reference... Best... Richard ----- Original Message ----- From: "Rodrigo Gomes" <gomes_k(a)dr.com> To: <wlug(a)mail.wlug.org> Sent: Wednesday, April 04, 2001 5:17 PM Subject: [Wlug] Friendly ISP in Worcester I would like to know names and url of lnx friendly ISP's in Worcester area. Thanks in advance. ______________________________________________ FREE Personalized Email at Mail.com Sign up at http://www.mail.com/?sr=signup _______________________________________________ Wlug mailing list Wlug(a)mail.wlug.org http://mail.wlug.org/mailman/listinfo/wlug

1 0

Friendly ISP in Worcester
by Rodrigo Gomes April 4, 2001

April 4, 2001

I would like to know names and url of lnx friendly ISP's in Worcester area. Thanks in advance. ______________________________________________ FREE Personalized Email at Mail.com Sign up at http://www.mail.com/?sr=signup

2 1