RE: Entering STDERR output to terminal

2000-08-24 Thread Burke, Thomas G.
I've never tried it, but could you use gets(STDERR) in your program? I'm assuming of course, that your program is written in C/C++... > -Original Message- > From: Clarence Donath [SMTP:[EMAIL PROTECTED]] > Sent: Thursday, August 24, 2000 8:45 AM > To: [EMAIL PROTECTED] > Subject:

RE: a doubt

2000-08-24 Thread Burke, Thomas G.
Yes, under the same domain isn't a problem... It's meerly a lookup in your DNS databases... We used to have 5 different subnets under a single domain (engr.siu.edu)... Each machine gets it's own name, of course... > -Original Message- > From: kdeepak [SMTP:[EMAIL PROTECTED]] > Sent: Thu

RE: RH Firewall

2000-08-24 Thread Burke, Thomas G.
To any who care (again)... My firewall is free for the copying at http://tomii.erols.com/firewall.txt If anyone sees anything wrong with it, or you think it's missing some stuff, please let me know... > -Original Message- > From: Nitebirdz [SMTP:[EMAIL PROTECTED]] > Sent: Thursday, Augu

RE: Gnapster

2000-08-24 Thread Burke, Thomas G.
Napster is under a court order to shut down it's database server... Nothing will connect there, now. > -Original Message- > From: Wayne Dyer [SMTP:[EMAIL PROTECTED]] > Sent: Thursday, August 24, 2000 1:51 PM > To: [EMAIL PROTECTED]; [EMAIL PROTECTED] > Subject: Re: Gnapster > > M

RE: Gnapster

2000-08-24 Thread Burke, Thomas G.
; -Original Message- > From: John Aldrich [SMTP:[EMAIL PROTECTED]] > Sent: Thursday, August 24, 2000 2:22 PM > To: [EMAIL PROTECTED] > Subject: RE: Gnapster > > On Thu, 24 Aug 2000, Burke, Thomas G. wrote: > > Napster is under a court order to shut down it's data

RE: LILO stops at LI

2000-08-25 Thread Burke, Thomas G.
Screwed up MBR... Get a DOS disk with fdisk on it... at the DOS prompt, type "fdisk /mbr" boot into LINUX using the linux boot disk run /sbin/lilo should fix it... > -Original Message- > From: Clarence Donath [SMTP:[EMAIL PROTECTED]] > Sent: Friday, August 25, 2000 11:27 AM > To: [

RE: DSL and DHCP

2000-08-29 Thread Burke, Thomas G.
Frm an earlier thread, it looks like a lot of the new cable/DSL modems act as routers, in that they are assigned the IP via DHCP, & their ethernet port is a non-routable subnet (IE 10.0.0.1)... Look into seeting your ethernet to 10.0.0.2, and then setting a default route to 10.0.0.1... > -Or

RE: FTP

2000-08-29 Thread Burke, Thomas G.
I can understand why you would want to ftp to a box as root, but a warning: FTP (like telnet) sends passwords unencrypted - anyone who is sniffing on any network through which your packets pass can get your machine, username (in this case root), and your password... Not a good thing... Look into

RE: I'd say this is someone trying to find an expolit

2000-08-29 Thread Burke, Thomas G.
disallow telnet & make valid users use ssh... send an e-mail to [EMAIL PROTECTED], include a copy of these logs & tell them what's going on... > -Original Message- > From: Scott Kindley [SMTP:[EMAIL PROTECTED]] > Sent: Tuesday, August 29, 2000 2:20 PM > To: [EMAIL PROTECTED] > Subject:

RE: I'd say this is someone trying to find an expolit

2000-08-29 Thread Burke, Thomas G.
Actually, I've found a _VERY_ nice tool for MS boxes called "Sam Spade" Does all sortsa neat stuff... If you have a Windoze box on your network, I'd look in to getting this, especially since it's free. > -Original Message- > From: John Aldrich [SMTP:[EMAIL PROTECTED]] > Sent: Tuesday, A

RE: OT: Supermicro P6DBS

2000-08-30 Thread Burke, Thomas G.
Yes, it does... I have a P6SBU, & it's a pretty hot little item... Too bad it only goes to 550MHz processors :( > -Original Message- > From: Gustav Schaffter [SMTP:[EMAIL PROTECTED]] > Sent: Wednesday, August 30, 2000 3:02 AM > To: [EMAIL PROTECTED] > Subject: Re: OT: Supermicro

RE: I'd say this is someone trying to find an expolit

2000-08-30 Thread Burke, Thomas G.
; Subject: RE: I'd say this is someone trying to find an expolit > > -BEGIN PGP SIGNED MESSAGE- > Hash: SHA1 > > >-Original Message- > >From: [EMAIL PROTECTED] > >[mailto:[EMAIL PROTECTED]]On Behalf Of Burke, Thomas G. > >Sent: Tuesday

RE: OT: Supermicro P6DBS

2000-08-30 Thread Burke, Thomas G.
rm... The link below talks about 600MHz. Not a big difference, but... > > Regards > Gustav > > "Burke, Thomas G." wrote: > > > > Yes, it does... I have a P6SBU, & it's a pretty hot little item... Too > bad > > it only goes to 550MHz proces

RE: I'd say this is someone trying to find an expolit

2000-08-30 Thread Burke, Thomas G.
On Wed, 30 Aug 2000, Burke, Thomas G. wrote: > > Yes, you and everyone else who is hacking on me for having a winblows > box in > > my house is correct. Anything Sam Spade can do I can do at the command > line > > on my LINUX server. > > > Thomas: > I don't

RE: System does not boot

2000-08-31 Thread Burke, Thomas G.
Corrupted Kernel? Recompile? > -Original Message- > From: Nitebirdz [SMTP:[EMAIL PROTECTED]] > Sent: Thursday, August 31, 2000 8:42 AM > To: [EMAIL PROTECTED] > Subject: System does not boot > > > Any ideas what could be causing this problem: > > LILO boot: > Loading linux

RE: I'd say this is someone trying to find an expolit

2000-09-05 Thread Burke, Thomas G.
You really ought to look in to PortSentry... It sees someone hitting multiple ports successively, & automatically adds them to hosts.deny, and adds a rule to your ipchains to dump their packets... After they tri[ it's protection, your machine becomes a black hole... You can also set up specific

RE: Traceroute woes!

2000-09-05 Thread Burke, Thomas G.
Well, I do them from behind my firewall all the time... I imagine he is doing something like blocking ICMP packets or something else he shouldn't be doing.. > -Original Message- > From: Steve Curry [SMTP:[EMAIL PROTECTED]] > Sent: Tuesday, September 05, 2000 1:11 PM > To: [EMAIL PROTEC

Lots of attempts recently...

2000-09-06 Thread Burke, Thomas G.
Wow! Is it just me, or has anyone else just had a rash of hack-attempts? I went away for 4 days, and had more than 20 attempts I usually only get about 4 (or less) per week... ___ Redhat-list mailing list [EMAIL PROTECTED] https://listma

RE: What architecture is an AMD k6?

2000-09-07 Thread Burke, Thomas G.
No, as the SPARC's are RISC... It's all in the compiler... Now, that said, the AMD's (Used to be) RISC cores that emulated Intel architecture... Cyrix was the same way. > -Original Message- > From: Jake McHenry [SMTP:[EMAIL PROTECTED]] > Sent: Wednesday, September 06, 2000 9:33 PM > To:

RE: Lots of attempts recently...

2000-09-07 Thread Burke, Thomas G.
TECTED]' > Subject: Re: Lots of attempts recently... > > On Wed, Sep 06, 2000 at 10:18:31AM -0400, Burke, Thomas G. wrote: > > Wow! > > > > Is it just me, or has anyone else just had a rash of hack-attempts? > > I went away for 4 days, and had more tha

RE: Urgent: Masquerading

2000-09-07 Thread Burke, Thomas G.
I think it might actually work... The machine on the other side of the hub (be it a router or whatever) should ignore the private network packets (192.168.x.x), while the linux masq box should recognize them & redirect them if it's told to do so... I don't know how to do this however, since they

RE: SSH & Machine permissions...

2000-09-07 Thread Burke, Thomas G.
OK, I checked my firewall & that's not the problem... > -Original Message----- > From: Burke, Thomas G. > Sent: Thursday, September 07, 2000 12:27 PM > To: '[EMAIL PROTECTED]'; '[EMAIL PROTECTED]'; > '[EMAIL PROTECTED]' > Subj

RE: SSH & Machine permissions...

2000-09-07 Thread Burke, Thomas G.
... > > On Thu, 07 Sep 2000, Burke, Thomas G. wrote: > > OK guys - I'm befuddled > > > > I have SSH set up on my box. I use TeraTerm SSH to log in from > > remote. I do this from work & my internal network all the time. Now, > the > > other

RE: SSH & Machine permissions...

2000-09-07 Thread Burke, Thomas G.
Re: SSH & Machine permissions... > > On Thu, 07 Sep 2000, Burke, Thomas G. wrote: > > OK guys - I'm befuddled > > > > I have SSH set up on my box. I use TeraTerm SSH to log in from > > remote. I do this from work & my internal network all the

RE: Urgent: Masquerading

2000-09-08 Thread Burke, Thomas G.
Yes... Anybody on the outside world can get directly to any machine on your LAN. > -Original Message- > From: UK Jaiswal [SMTP:[EMAIL PROTECTED]] > Sent: Friday, September 08, 2000 9:09 AM > To: [EMAIL PROTECTED] > Subject: Re: Urgent: Masquerading > > Hi, > > I have finally don

RE: Is it possible?

2000-09-11 Thread Burke, Thomas G.
I have an old 386 with RH3.3 installed on it (that was my 1st RH install)... It is using up about 300M, as I recall, & it's pretty stripped down... I think the GNU compiler & libs takes up about 20M on its own... > -Original Message- > From: Statux [SMTP:[EMAIL PROTECTED]] > Sent: Saturd

IPCHAINS - Did I do this right?

2000-09-11 Thread Burke, Thomas G.
Hey all, I'm blocking a network from having access to my box & I'm curious if I did this correctly: $IPCHAINS -A input -l -s 210.127.0.0/0 -d $EXTERNAL_NET -j DENY I want to block all of 210.127.x.x Is the 0 correct, or should it be a 16? Thanks.

RE: time tracking

2000-09-12 Thread Burke, Thomas G.
Sounds like your a gov't contractor... Sorry, but the only help I can give you is to try ical... > -Original Message- > From: Michael R. Jinks [SMTP:[EMAIL PROTECTED]] > Sent: Tuesday, September 12, 2000 3:32 AM > To: [EMAIL PROTECTED] > Subject: time tracking > > Time tracking.

RE: Good options for backups...

2000-09-12 Thread Burke, Thomas G.
No, I don't think so... I would like the same thing he's looking for (for Win9x), and this ain't it, as far as I can tell.. In our case(s), the burner is on the Winblows box, not the LINUX box... I have tried using samba to share the entire server & then copy it, but that didn't work... Maybe I

RE: MAC Filter

2000-09-12 Thread Burke, Thomas G.
I've done something similar (long, long ago) - but it involved a lookup table that matched MAC to IP, such that individual machines could be monitored, etc... I don't know how to pull a MAC address out of a data stream... I think there must be a way to query the card from remote, but I don't kno

RE: ipchains, port forwarding

2000-09-12 Thread Burke, Thomas G.
Yes, it can be done... No, I don't know how (sorry)... > -Original Message- > From: Andy Schuler [SMTP:[EMAIL PROTECTED]] > Sent: Tuesday, September 12, 2000 11:36 AM > To: [EMAIL PROTECTED] > Subject: ipchains, port forwarding > > I've setup a router/firewall box running RH 6.2 a

RE: SSH & Machine permissions...

2000-09-13 Thread Burke, Thomas G.
TECTED] > Subject: Re: SSH & Machine permissions... > > > > El día Thu, 7 Sep 2000 15:03:23 -0400 "Burke, Thomas G." escribió: > > My understanding is that hosts.allow/deny only effect those services run > by > > inetd... > > > This is n

RE: Unable to load interpreter

2000-09-13 Thread Burke, Thomas G.
There's a memtest program out there somewhere... You follow it's instructions & it creates a boot disk for you, & then does a _thorough_ check of your memory, reporting different errors that it finds... Sorry, I can't remember the name or find my copy of it (some help I am, huh?) > -Origina

RE: Unable to load interpreter

2000-09-13 Thread Burke, Thomas G.
memtest86/ > > Regards > Gustav > > "Burke, Thomas G." wrote: > > > > There's a memtest program out there somewhere... You follow it's > > instructions & it creates a boot disk for you, & then does a _thorough_ > > check of your me

RE: [OT] Clarification

2000-09-14 Thread Burke, Thomas G.
Sounds familiar I've bought my 1st computer (Atari 400) in 1982... Bought my 1st IBM clone (386sx) in 1991... People used to come to me to have their machines tweaked... Heck, I used that 386sx until 3 years ago. Got rid of it at the same time as my 2 8086 (IBM Citations), but I think I s

RE: tar & gzip

2000-09-18 Thread Burke, Thomas G.
> > On Mon, Sep 18, 2000 at 09:39:30AM -0400, Burke, Thomas G. wrote: > > what's the correct command to create a .tar.gz file in one step? > > > > > > > > ___ > > Redhat-

RE: No log entries in /var/log/messages or secure

2000-09-19 Thread Burke, Thomas G.
Restart logging -> Check /etc/syslog.conf... man syslog > -Original Message- > From: Kerry Miller [SMTP:[EMAIL PROTECTED]] > Sent: Tuesday, September 19, 2000 12:49 PM > To: '[EMAIL PROTECTED]' > Subject: No log entries in /var/log/messages or secure > > Ok, I've taken several o

RE: Can Linux access net thru win95 box with dial up modem?

2000-09-22 Thread Burke, Thomas G.
Check into something called WinGate - that is exactly what it is designed to do (Masq for windows servers)... I think that Win 98 & newer have this capability built in (possibly VPN?), but I have never used it, so I can't help you there. > -Original Message- > From: Huttinger [SMTP:[EMAI

RE: More hacked server questions

2000-09-22 Thread Burke, Thomas G.
Not to mention he's 1000 miles away from the box (which he did state in his e-mail) > -Original Message- > From: Jamin Collins [SMTP:[EMAIL PROTECTED]] > Sent: Thursday, September 21, 2000 5:51 PM > To: '[EMAIL PROTECTED]' > Subject: RE: More hacked server questions > > IIRC, he's

RE: More hacked server questions

2000-09-22 Thread Burke, Thomas G.
I got hacked & was used in DDOS attacks on yahoo, AOL, etc, back when that all was real big in the news... I offered my logs to the FBI, & they didn't take me up on it, so I guess it's not a real high priority for them, regardless of what you hear about it... > -Original Message- > From:

Sendmail exploit?

2000-09-25 Thread Burke, Thomas G.
I've been seeing the following log entry alot recently (from different machines)... Is this a sendmail exploit I'm not aware of, or what? Before anyone asks, tomii is the name of my machine... Sep 24 13:11:45 tomii sendmail[23111]: NOQUEUE: Null connection from [209.185.179.107]

RE: Sendmail exploit?

2000-09-25 Thread Burke, Thomas G.
'[EMAIL PROTECTED]' > Subject: Re: Sendmail exploit? > > --On 09/25/00 08:17:20 AM -0400 "Burke, Thomas G." > <[EMAIL PROTECTED]> wrote: > > > I've been seeing the following log entry alot recently (from different > > machines)... Is

RE: Help with some IPCHAINS details

2000-09-25 Thread Burke, Thomas G.
Yes, keep PortSentry running... Also check into logwatch & logcheck... Set up host.allow & hosts.deny... Check out http://tomii.erols.com/firewall.txt > -Original Message- > From: Andrew Rittner [SMTP:[EMAIL PROTECTED]] > Sent: Thursday, September 14, 2000 9:36 AM > To: [EMAIL PROT

RE: Help with some IPCHAINS details

2000-09-25 Thread Burke, Thomas G.
check out: http://tomii.erols.com/firewall.txt > -Original Message- > From: Andrew Rittner [SMTP:[EMAIL PROTECTED]] > Sent: Thursday, September 14, 2000 9:36 AM > To: [EMAIL PROTECTED] > Subject: Help with some IPCHAINS details > > Hi! I've recently begun experimenting with IPCH

RE: Two little problems

2000-09-27 Thread Burke, Thomas G.
The LI problem is a corrupted MBR... Get a DOS/Win95 bootdisk with fdisk on it, & run "fdisk /mbr" reboot the machine to linux using a linux boot disk, then run (/usr(?))/sbin/lilo (can't remember the exact path) That should fix your booting problem.. Can't help you with the floppy problem, th

tar & gzip

2000-09-18 Thread Burke, Thomas G.
what's the correct command to create a .tar.gz file in one step? ___ Redhat-list mailing list [EMAIL PROTECTED] https://listman.redhat.com/mailman/listinfo/redhat-list

ifconfig reports stuff I've never seen before...

2000-10-02 Thread Burke, Thomas G.
I've taken out the entries I know about... Last time I may have compiled the kernel to allow IP Tunneling, although I can't recall why. I don't recall ever enabling it, though - same goes for dummy net driver support... The gre0, though I have absolutely _NO_ clue what that is, can someone

Can somebody help me find these machines?

2000-10-02 Thread Burke, Thomas G.
I've been getting Back Orifice attempts from this machine for a couple of days... Doing all the whois, etc, gives me the Vatican, except that this IP is not one of theirs. A traceroute seems to imply that it's coming from somewhere in UAE, except that a lot of the steps in between show bogus rDN

RE: 386/387 coupling

2000-10-02 Thread Burke, Thomas G.
What model is it - does it have the mathco, or not? That was the difference between the i486sx & dx processors, but I'm not sure if the AMD's ever had a version with no mathco... Perhaps this one's is shot? > -Original Message- > From: Kerry Miller [SMTP:[EMAIL PROTECTED]] > Sent: Frida

RE: Can somebody help me find these machines?

2000-10-03 Thread Burke, Thomas G.
Thanks! My whois went through RIPE, actually... Dunno why it turned up differently that yours... (PFM?) > -Original Message- > From: Brian Ashe [SMTP:[EMAIL PROTECTED]] > Sent: Tuesday, October 03, 2000 2:55 AM > To: Burke, Thomas G. > Subject: Re: Can somebo

RE: Can somebody help me find these machines?

2000-10-03 Thread Burke, Thomas G.
tober 03, 2000 10:39 AM > To: [EMAIL PROTECTED] > Subject: Re: Can somebody help me find these machines? > > On Mon, 02 Oct 2000, Burke, Thomas G. wrote: > > I've been getting Back Orifice attempts from this machine for a couple > of > > days... Doing all the

RE: log entries: innocent or crack attempt?

2000-10-03 Thread Burke, Thomas G.
Looks to me like something similar to the following happened: 1) (L)user on 203.21.16.18 connected (http) to your web server at 15:00 (so far not too worrisome) 2) L(user) on 203.21.16.18 tries to ssh into your machine - WARNING! He has no business doing this, you are being probed! 3) Authenti

SSH & Machine permissions...

2000-09-07 Thread Burke, Thomas G.
OK guys - I'm befuddled I have SSH set up on my box. I use TeraTerm SSH to log in from remote. I do this from work & my internal network all the time. Now, the other day I was at my parents' house in S. IL., and wanted to connect to my server. When I tried, the box denied my logi

RE: (OF) Java

2000-10-04 Thread Burke, Thomas G.
It's not gets? I can't remember - been so long since I've used anything but C/C++... Maybe io.in? > -Original Message- > From: Jefferson Ryan Tang Lee [SMTP:[EMAIL PROTECTED]] > Sent: Wednesday, October 04, 2000 10:46 AM > To: [EMAIL PROTECTED] > Subject: (OF) Java > > hi, > >

login ... in.rlogind (inetd.conf)

2000-10-05 Thread Burke, Thomas G.
Hey all, I gots a question... In the inetd.conf, the line: login stream tcp nowait root/usr/sbin/tcpd in.rlogind Can this be commented out? My feeling is that it's probably for r* services (rsh, etc), but I don't want to screw myself and not be able to log in to the machine at all

RE: Strange entry in inetd.conf

2000-10-05 Thread Burke, Thomas G.
check out http://tomii.erols.com/firewall.txt for a decent ipchains script to get you started & explain some stuff. > -Original Message- > From: Gustav Schaffter [SMTP:[EMAIL PROTECTED]] > Sent: Thursday, October 05, 2000 8:34 AM > To: [EMAIL PROTECTED] > Subject: Re: Strange entry

RE: unsubscribe -can someone at least bother to reply 4 the first time

2000-10-06 Thread Burke, Thomas G.
Sorry, as we're all used to seeing this complain, now, we tune it out... (and the solution has been posted many times) >From a previous post: Go to the URL listed at the last line of each message in the group you want to modify or unsubscribe. In thie case of this group it is: https://listma

RE: log entries: innocent or crack attempt?

2000-10-06 Thread Burke, Thomas G.
nd attempted connections, but I haven't > seen anything suspicious since. > > I ran "rpm -Va" on the server, and everthing checked out OK. > > Anything else I should do to verify the integrity of my systems? [Burke, Thomas G.] Install & run tripwire.

RE: unsubscribe -can someone at least bother to reply 4 the first time

2000-10-06 Thread Burke, Thomas G.
I always tohught it was "sot" (like a drunk)... > -Original Message- > From: Charles Galpin [SMTP:[EMAIL PROTECTED]] > Sent: Friday, October 06, 2000 10:14 AM > To: [EMAIL PROTECTED] > Subject: Re: unsubscribe -can someone at least bother to reply 4 the > first time > > You ungra

RE: unsubscribe -can someone at least bother to reply 4 the first time

2000-10-06 Thread Burke, Thomas G.
RE: unsubscribe -can someone at least bother to reply 4 the > first time > > mmh. I'm not sure. Can anyone clarify? I think the intent was clear though > >:) > > On Fri, 6 Oct 2000, Burke, Thomas G. wrote: > > > I always tohught it was "sot" (like a

RE: Conferencing?

2000-10-06 Thread Burke, Thomas G.
I use ICQ, & I've gotten netmeeting to work before... Anything on the masq'd network cannot host to anything outside the masq'd network. These machines can, however, connect to any of the others, or to any server on the internet > -Original Message- > From: Stephen E. Hargrove [SMTP:[

RE: Tripwire Policies

2000-10-09 Thread Burke, Thomas G.
Leaving it as defaults can be a pain, as it will mail you huge logs every night with the same thing wrong every night (logs changed, etc)... Make some minor mods to match your system. > -Original Message- > From: Peter Kiem [SMTP:[EMAIL PROTECTED]] > Sent: Friday, October 06, 2000 9:42 P

RE: Tripwire Policies

2000-10-09 Thread Burke, Thomas G.
Sorry, Can't help you there... Been too long since I looked at it. > -Original Message- > From: rpjday [SMTP:[EMAIL PROTECTED]] > Sent: Monday, October 09, 2000 8:23 AM > To: '[EMAIL PROTECTED]' > Subject: RE: Tripwire Policies > > On Mon

RE: firewall

2000-10-09 Thread Burke, Thomas G.
Check out http://tomii.erols.com/firewall.txt Good starting point (or so I'm told) > -Original Message- > From: Rick Knebel [SMTP:[EMAIL PROTECTED]] > Sent: Monday, October 09, 2000 11:37 AM > To: [EMAIL PROTECTED] > Subject: firewall > > Hi, > > I am now completely confused. >

NetBus attacks

2000-10-10 Thread Burke, Thomas G.
Geez... I normally get maybe 10 crack attempts per week... I've gotten 15 in the last 24 hours, almost all of them banging on the door of port 12345 (NetBus)... And, of course, most of them are coming from kr... I wonder if they've given up trying to get in & are just trying

RE: NetBus attacks

2000-10-11 Thread Burke, Thomas G.
per day from the same set of IPs. How do I go about > notifying the admin authority? > > Drew > > -Original Message- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED]]On Behalf Of Burke, Thomas G. > Sent: Tuesday, October 10, 2000 3:41 AM > To: '

ACK! - glibc update errors!

2000-10-11 Thread Burke, Thomas G.
Hey all, I just tried to install the updates to glibc (glibc-2.1.3-21.i386.rpm, glibc-devel-2.1.3-21.i386.rpm, glibc-profile-2.1.3-21.i386.rpm), and got a heap gob of errors on the glibc install. The errors look like this: package LC_MESSAGES not found in file index __

RE: NetBus attacks

2000-10-11 Thread Burke, Thomas G.
rror after about the 15th > hop. > > Drew > > -Original Message- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED]]On Behalf Of Burke, Thomas G. > Sent: Wednesday, October 11, 2000 4:48 AM > To: '[EMAIL PROTECTED]' > Subject: RE: NetBus attacks

RE: NetBus attacks

2000-10-11 Thread Burke, Thomas G.
There's a couple of other ones in that region, too... The whois output may tell you if there's another to get speific lookups. > -Original Message- > From: John Aldrich [SMTP:[EMAIL PROTECTED]] > Sent: Wednesday, October 11, 2000 10:27 AM > To: [EMAIL PROTECTED] > Subject: RE: Net

RE: Port 113 - Should I have this open?

2000-10-12 Thread Burke, Thomas G.
>From /etc/services: auth113/tcp authentication tap ident It is used for the ident daemon (best I can tell) - It's not blocked on my machine, either. I don't know if blocking it breaks anything or not... > -Original Message- > From: Jamin Collins [SMTP:[EMAIL PROTEC

RE: Linux firewall/router on 420M drive? Plus other questions...

2000-10-12 Thread Burke, Thomas G.
firewall/router to share my internet connection > between several > computers. Problem is, I only have an old 420meg harddrive to use (rest > of system is Cyrix 166 > w/64meg RAM). Is this possible? > [Burke, Thomas G.] Stripped down, with no GCC or X, yes - it can be

RE: Port education required

2000-10-12 Thread Burke, Thomas G.
Generally speaking, do not shut down any ports above 1023. The exception to this rule is ports with known security risks, etc (IE NetBus, Trin00, etc) > -Original Message- > From: Chris Harvey [SMTP:[EMAIL PROTECTED]] > Sent: Thursday, October 12, 2000 2:03 PM > To: [EMAIL PROTECTED]

RE: Headless linux boxes, monitors through serial ports? Plus Q on Wyse 30,50,60,150 models as monitors

2000-10-17 Thread Burke, Thomas G.
You need a terminal or terminal emulator to do this (serial video). Yes, your WYSE terminals are exactly what it's intended for (They are serial comm devices). No, Never done it, don't know how (Although, I _am_ curious). > -Original Message- > From: Dan Browning [SMTP:[EMAIL PROTECTED]

RE: "Masking" ports from IP ranges (was RE: Thanks & port 80 filterin g by IP)

2000-10-17 Thread Burke, Thomas G.
Most of the ISP's (so I understand) monitor by traffic. You can limit this traffic by requiring passwords, etc... (I have a friend who does this) > -Original Message- > From: Ward William E PHDN [SMTP:[EMAIL PROTECTED]] > Sent: Monday, October 16, 2000 10:32 AM > To: '[EMAIL PROTECTED

RE: Nobody looking???

2000-10-23 Thread Burke, Thomas G.
Absolutely no clue... > -Original Message- > From: Gustav Schaffter [SMTP:[EMAIL PROTECTED]] > Sent: Saturday, October 21, 2000 3:37 PM > To: redhat-list (Mailing list) > Subject: Nobody looking??? > > Hi, > > I just found this in my log: > > Oct 21 19:14:18 valhall rpc.statd[47

RE: US Elections - enough is enough!

2000-10-23 Thread Burke, Thomas G.
I'm a Persian Gulf Vet... I have great respect for what the flag (US) stands for. Because of that respect, I believe flag burning should be legal, as part of what it stands for is free speech. By making this illegal, we desicrate our Constition more than allowing the flag to be burned in prot

RE: Nobody looking???

2000-10-24 Thread Burke, Thomas G.
l, you just joined the club. Thanks for the recognition of my mail, > though.:-) > > Regards > Gustav > > "Burke, Thomas G." wrote: > > > > Absolutely no clue... > > > > > Hi, > > > > > > I just found this in my log: &

RE: >>>>>> iDSL LINUX PROXY<<<<<<

2000-10-25 Thread Burke, Thomas G.
Check out http://tomii.erols.com/firewall.txt for what I'm told is a decent firewall... It is well commented. > -Original Message- > From: Nic Steussy [SMTP:[EMAIL PROTECTED]] > Sent: Tuesday, October 24, 2000 7:48 PM > To: [EMAIL PROTECTED] > Subject: Re: >> iDSL LINUX PROXY<

RE: Volume Charging (Was: US Elections - STOP THIS THREAD)

2000-10-25 Thread Burke, Thomas G.
I guess that keeps you from going crazy on Napster & the like, huh? ;) > -Original Message- > From: Peter Kiem [SMTP:[EMAIL PROTECTED]] > Sent: Wednesday, October 25, 2000 1:48 AM > To: [EMAIL PROTECTED] > Subject: Volume Charging (Was: US Elections - STOP THIS THREAD) > > Hi Stev

RE: IP Source Address Verification

2000-10-26 Thread Burke, Thomas G.
This is normal... Filesize is in k, I believe... If you are unshure, hust type "more to see the contents of the file. > -Original Message- > From: Ed Lazor [SMTP:[EMAIL PROTECTED]] > Sent: Thursday, October 26, 2000 11:27 AM > To: [EMAIL PROTECTED] > Subject: IP Source Address V

RE: technical/practical knowledge WAS -> Re: US Elections

2000-10-26 Thread Burke, Thomas G.
Me too, but I just can't remember how to use plastigauge (Do they still make that stuff?) > -Original Message- > From: Chris Worth [SMTP:[EMAIL PROTECTED]] > Sent: Thursday, October 26, 2000 1:24 PM > To: Manuel A. Camacho Q.; [EMAIL PROTECTED] > Subject: technical/practical knowle

RE: Why am I getting "/dev/hda1 was not cleanly unmounted - check for ced" (RH6.2)

2000-10-26 Thread Burke, Thomas G.
If your HD is going bad (or controller), then you could, in effect, not be shutting down correctly (even though you are doing everything correctly)... If you're machine is having a kernel panic every couple of days at 12:02 am (like a cron job set weekly, or every three days, or whatever), then I

RE: ipchains question

2000-10-26 Thread Burke, Thomas G.
I think it's ipportfw, but I wouldn't swear to that. > -Original Message- > From: Ed Lazor [SMTP:[EMAIL PROTECTED]] > Sent: Thursday, October 26, 2000 2:11 PM > To: [EMAIL PROTECTED] > Subject: ipchains question > > I setup an ipchains based firewall and set it up to masq everythi

RE: Stupid question

2000-11-02 Thread Burke, Thomas G.
uname -a? > -Original Message- > From: Scott Skrogstad [SMTP:[EMAIL PROTECTED]] > Sent: Thursday, November 02, 2000 10:40 AM > To: Red Hat Mailing list > Subject: Stupid question > > How the heck to I find out what version of RED HAT is actually on a > machine? > > Scott Skrogsta

RE: Linux training

2000-11-02 Thread Burke, Thomas G.
Learning Tree is offerring LINUX training now, too... They are well known, _and_ international. Check out http://www.learningtree.com/ > -Original Message- > From: Paul H. Bern [SMTP:[EMAIL PROTECTED]] > Sent: Thursday, November 02, 2000 10:47 AM > To: [EMAIL PROTECTED] > Subject:

RE: Hacked?

2000-04-07 Thread Burke, Thomas G.
Thanks for that piece of info, as I couldn't seem to find a contact number for that network... > -Original Message- > From: Fred Herman [SMTP:[EMAIL PROTECTED]] > Sent: Friday, April 07, 2000 3:41 PM > To: [EMAIL PROTECTED] > Subject: Re: Hacked? > >

Hacked?

2000-04-07 Thread Burke, Thomas G.
OK, here's the deal... Big, and in sections (separated by tildes (~))... As an aside, I have just added 165.113.216.6 to my hosts.deny file... Sections include tcpdump, log files, and a traceroute... I cannot nslookup what appears to be the offending host (165.113.216.6) (Nor can a whois him).

RE: testing

2000-04-13 Thread Burke, Thomas G.
I got it. > -Original Message- > From: Steve Lee [SMTP:[EMAIL PROTECTED]] > Sent: Wednesday, April 12, 2000 1:06 AM > To: RedHat Maillist > Subject: testing > > is anyone getting my email. > respond. > > > -- > To unsubscribe: mail [EMAIL PROTECTED] with "unsubscribe" > as the

RE: Hacked?

2000-04-13 Thread Burke, Thomas G.
Well, darn it all, I _have_ been hacked... I found a copy of netcat (/usr/sbin/netcat), and that's been causing the heartaches... I will delete it now, & order a copy of RH6.2 today, I suppose. I've been thinking of a complete re-install of a newer version, anyway... Here's a question: When d

RE: Hacked?

2000-04-18 Thread Burke, Thomas G.
mm, what is netcat, and how does it imply a comprised system? I > noticed it > is also in the linuxconf-1.16r1.3-1.i386.rpm as > "/usr/lib/linuxconf/lib/netcat" > > "Burke, Thomas G." wrote: > > > Well, darn it all, I _have_ been hacked... I found a cop

Got 6.2 installed, what next? - long winded.

2000-04-24 Thread Burke, Thomas G.
I just installed 6.2 on my server, and am now in the process of trying to lock the box down. I need to install the errata & updates (which I have already downloaded), but I can't remember the command for the graphical RPM tool (Is it glint?) (I ask for the graphical, as I am doing everything from

gnorpm & Enlightenment?

2000-04-26 Thread Burke, Thomas G.
I just installed 6.2 (full install) - I think Enlightenment is what's coming up as the X manager (I may be wrong) Regardless, will gnorpm work under this, or is Gnome required? -- To unsubscribe: mail [EMAIL PROTECTED] with "unsubscribe" as the Subject.

RE: 6.2 package list

2000-04-26 Thread Burke, Thomas G.
ls /mnt/cdrom > PackageList ? > -Original Message- > From: Bob Rankin [SMTP:[EMAIL PROTECTED]] > Sent: Wednesday, April 26, 2000 3:09 PM > To: [EMAIL PROTECTED] > Subject: 6.2 package list > > I notice that the complete package list is not included in the RH6.2 > Install Guide, a

RE: 6.2 package list

2000-04-26 Thread Burke, Thomas G.
nal Message- > From: Bob Rankin [SMTP:[EMAIL PROTECTED]] > Sent: Wednesday, April 26, 2000 3:21 PM > To: '[EMAIL PROTECTED]' > Subject: RE: 6.2 package list > > On Wed, 26 Apr 2000, Burke, Thomas G. wrote: > > > ls /mnt/cdrom > PackageList > >

RE: 6.2 package list

2000-04-26 Thread Burke, Thomas G.
My point is, that if you did a full install, then these would be identical > -Original Message- > From: Bob Rankin [SMTP:[EMAIL PROTECTED]] > Sent: Wednesday, April 26, 2000 3:26 PM > To: '[EMAIL PROTECTED]' > Subject: RE: 6.2 package list > > On We

Powertools?

2000-04-26 Thread Burke, Thomas G.
I have a powertools CD for 5.2, Where can I get the new one for 6.2? -- To unsubscribe: mail [EMAIL PROTECTED] with "unsubscribe" as the Subject.

6.2 installed, what now? (Long winded as usual)

2000-04-27 Thread Burke, Thomas G.
Well, I got 6.2 installed, and also installed the errata. As an interesting aside, after installing the new kernel and sources, I had to recompile as it broke my networking - just as well, as it's now a meaner, cleaner kernel. OK, as I said before, I want ftp, telnet, smtp, pop, and http availab

RE: Older Redhat versions, where can I buy ?

2000-05-01 Thread Burke, Thomas G.
I have slackwAre going all the way back to 1992 or 3, I have RH 5.2 easily available, but I'm not sure about 4.2... Hell, I'll send whatever you want for postage plus $1 per package, how's that sound? > -Original Message- > From: Greg Wright [SMTP:[EMAIL PROTECTED]] > Sent: Sunday, April

I'm confuzzed!

2000-05-03 Thread Burke, Thomas G.
I'm really confuzzed (pronounce it the way it's spelled) about a couple things, here... Could somebody *please* explain to me what the _HECK_ is going on here? 1) Samba doesn't start on system boot up, I have to do it manually. Looked into /etc/rc.d/rc?.d, and there are no SXXsmb files. So, I

RE: I'm confuzzed!

2000-05-03 Thread Burke, Thomas G.
working system? > -Original Message- > From: Steven Schramm [SMTP:[EMAIL PROTECTED]] > Sent: Wednesday, May 03, 2000 10:30 AM > To: [EMAIL PROTECTED] > Subject: Re: I'm confuzzed! > > "Burke, Thomas G." wrote: > > > > I'm really con

  1   2   3   4   5   >