Re: administrativa: moron autoreply from martin.j@sargas.nl

2003-03-27 Thread Sander Smeenk
Quoting Lars Ellenberg ([EMAIL PROTECTED]): > I got this autoreply on each of my recent posts to the list. > maybe someone in charge of it can remove this address from the list. > Dit e-mail adres bestaat niet This is dutch, and translates to 'This email address does not exist'. Regards

Re: administrativa: moron autoreply from martin.j@sargas.nl

2003-03-27 Thread Sander Smeenk
Quoting Lars Ellenberg ([EMAIL PROTECTED]): > I got this autoreply on each of my recent posts to the list. > maybe someone in charge of it can remove this address from the list. > Dit e-mail adres bestaat niet This is dutch, and translates to 'This email address does not exist'. Regards

Re: Bug #173254 Submitted: Snort In Stable "Unusable"

2002-12-18 Thread Sander Smeenk
Quoting Noah L. Meyerhans ([EMAIL PROTECTED]): > A third option might be to create a "snort-tracker" package that makes > it easier to build an up-to-date snort binary, complete with up-to-date > rules. Similar to pine-tracker, but for a different purpose. > I'm not sure if that would be feasible

Re: Bug #173254 Submitted: Snort In Stable "Unusable"

2002-12-18 Thread Sander Smeenk
Quoting Noah L. Meyerhans ([EMAIL PROTECTED]): > A third option might be to create a "snort-tracker" package that makes > it easier to build an up-to-date snort binary, complete with up-to-date > rules. Similar to pine-tracker, but for a different purpose. > I'm not sure if that would be feasible

Re: Bug #173254 Submitted: Snort In Stable "Unusable"

2002-12-17 Thread Sander Smeenk
Quoting Kjetil Kjernsmo ([EMAIL PROTECTED]): > > Atleast, that is what I have seen most people doing. > *raises hand* :) > I wondering, could it be an idea to have a fast-moving archive for > things like SpamAssassin rules, Nessus plugins, Snort signatures, > perhaps virus signatures in the fut

Re: Bug #173254 Submitted: Snort In Stable "Unusable"

2002-12-17 Thread Sander Smeenk
Quoting Kjetil Kjernsmo ([EMAIL PROTECTED]): > > Atleast, that is what I have seen most people doing. > *raises hand* :) > I wondering, could it be an idea to have a fast-moving archive for > things like SpamAssassin rules, Nessus plugins, Snort signatures, > perhaps virus signatures in the fut

Re: Bug #173254 Submitted: Snort In Stable "Unusable"

2002-12-17 Thread Sander Smeenk
Quoting Nick Boyce ([EMAIL PROTECTED]): > Sander's preferred option would be to remove the Snort package > altogether in these circumstances. What would be quicker : remove the > package, or add the warning to the web-page ? I guess we ought to do > *something*. Hmm... IMHO, nobody reads the

Re: Bug #173254 Submitted: Snort In Stable "Unusable"

2002-12-17 Thread Sander Smeenk
Quoting Nick Boyce ([EMAIL PROTECTED]): > Sander's preferred option would be to remove the Snort package > altogether in these circumstances. What would be quicker : remove the > package, or add the warning to the web-page ? I guess we ought to do > *something*. Hmm... IMHO, nobody reads the

Re: Can someone help a Newbie

2001-09-03 Thread Sander Smeenk \(CistroN Medewerker\)
Quoting cdpye ([EMAIL PROTECTED]): > I have noticed recently that attempted connections to my box aren't being > logged in syslog. It's possible that RH installed a deamon like 'tcplogd' and 'icmplogd' by default or you just enabled that option. These deamons show incomming connection attempts an

Re: Can someone help a Newbie

2001-09-03 Thread Sander Smeenk (CistroN Medewerker)
Quoting cdpye ([EMAIL PROTECTED]): > I have noticed recently that attempted connections to my box aren't being > logged in syslog. It's possible that RH installed a deamon like 'tcplogd' and 'icmplogd' by default or you just enabled that option. These deamons show incomming connection attempts a

Re: Exploit - what to do

2001-07-18 Thread Sander Smeenk \(CistroN Medewerker\)
Quoting Jerzy Wolinski ([EMAIL PROTECTED]): > I found some local root exploit (source and binary). > What should I do? You could post the *SOURECE* to [EMAIL PROTECTED] so they can take a look at it. Or send it here, so we all can take a look at it :) Regards, Sander. -- | gewoon, ik zit hier

Re: Exploit - what to do

2001-07-18 Thread Sander Smeenk (CistroN Medewerker)
Quoting Jerzy Wolinski ([EMAIL PROTECTED]): > I found some local root exploit (source and binary). > What should I do? You could post the *SOURECE* to [EMAIL PROTECTED] so they can take a look at it. Or send it here, so we all can take a look at it :) Regards, Sander. -- | gewoon, ik zit hier

Re: iptables w/2.4 kernels

2001-04-19 Thread Sander Smeenk \(CistroN Medewerker\)
Quoting Robert Bartels ([EMAIL PROTECTED]): > I don't see how this can be done if the ftp server doesn't support anonymous > logins or > fpx xfers... For all I know you don't even have to log in to the ftp server... If you just connect and send a PORT commando, the iptables ftp-connection trackin

Re: iptables w/2.4 kernels

2001-04-19 Thread Sander Smeenk (CistroN Medewerker)
Quoting Robert Bartels ([EMAIL PROTECTED]): > I don't see how this can be done if the ftp server doesn't support anonymous > logins or > fpx xfers... For all I know you don't even have to log in to the ftp server... If you just connect and send a PORT commando, the iptables ftp-connection tracki

Re: rpc.statd

2001-04-08 Thread Sander Smeenk \(CistroN Medewerker\)
Quoting Alexander Hvostov ([EMAIL PROTECTED]): > On Sun, 8 Apr 2001 18:04:54 -0400 > "Robert Bartels" <[EMAIL PROTECTED]> wrote: > > > I saw this in my logs today. > > > > Apr 8 15:08:43 mikado rpc.statd[179]: gethostbyname error for > > It looks like statd is still running. Is rpc still vulnera

Re: rpc.statd

2001-04-08 Thread Sander Smeenk (CistroN Medewerker)
Quoting Alexander Hvostov ([EMAIL PROTECTED]): > On Sun, 8 Apr 2001 18:04:54 -0400 > "Robert Bartels" <[EMAIL PROTECTED]> wrote: > > > I saw this in my logs today. > > > > Apr 8 15:08:43 mikado rpc.statd[179]: gethostbyname error for > > It looks like statd is still running. Is rpc still vulner

Re: Clear screan question

2001-01-28 Thread Sander Smeenk \(CistroN Medewerker\)
Quoting wes schreiner ([EMAIL PROTECTED]): > Not that I can see, though I'd love to know of a clean way to clear the > scroll-back buffer. I agree it's a bit hackish. Can anyone come up > with something better? Ehm.. I did this: knopje# echo -e "\033[2J\033[1;1H" > issue.new knopje# cat /etc/i

Re: Clear screan question

2001-01-28 Thread Sander Smeenk (CistroN Medewerker)
Quoting wes schreiner ([EMAIL PROTECTED]): > Not that I can see, though I'd love to know of a clean way to clear the > scroll-back buffer. I agree it's a bit hackish. Can anyone come up > with something better? Ehm.. I did this: knopje# echo -e "\033[2J\033[1;1H" > issue.new knopje# cat /etc/