Re: [Rkhunter-users] Hashes updated - but no hashes available.

good' check... Info: Check skipped - no hashes available Did you install RKH using the installer.sh (meaning no files in non- default locations or the rkhunter.conf adjusted properly)? Did you verify the updated hashes where actually added to your defaulthashes.dat? Cheers, unSpawn Concerned

Re: [Rkhunter-users] some queries on hash checks

and before it's exposed to any network. Next to that you should keep an off-site backup copy of the binary, config and database(s). Cheers, unSpawn Concerned about your privacy? Instantly send FREE secure email, no account required http://www.hushmail.com/send?l=480 Get the best prices

Re: [Rkhunter-users] Hidden files warnings

stat to see when they where modified and/or accessed and file / strings to check what it contains. * grep ALLOWHIDDEN rkhunter.conf shows about all of them are legitimate entries. HTH, unSpawn Concerned about your privacy? Instantly send FREE secure email, no account required http

Re: [Rkhunter-users] New RootKit to detect -- mood-nt. Please implement

but with respect to compromises, time is short. I suggest you check using this info: http://www.cert.org/tech_tips/intruder_detection_checklist.html before doing anything else. Preferably run those checks from a Live CD like HELIX or equivalent. unSpawn Concerned about your privacy? Instantly

Re: [Rkhunter-users] Interesting RootKit site..

RKH developers getting all the community support they need for accomplishing this. If you want to chip in you're welcome. unSpawn Concerned about your privacy? Instantly send FREE secure email, no account required http://www.hushmail.com/send?l=480 Get the best prices on SSL certificates

Re: [Rkhunter-users] rkhunter does not know OpenSSH 4.5p1

Hello, On Tue, 14 Nov 2006 21:39:09 +0100 csant [EMAIL PROTECTED] wrote: rkhunter with latest updates still does not know OpenSSH 4.5p1, released on Nov 7th 2006. Maybe thats because nobody told us it should til now :-] Cheers, unSpawn Concerned about your privacy? Instantly send FREE

Re: [Rkhunter-users] bad crc's on 1.2.9

RKH's Sourceforge download page. Any ideas or suggestions or comments are welcome as long as they are not snide or sarcastic. Looking back at the replies made I can only conclude the RKH end- users and developers here make it a suprisingly patient and friendly mailing list. Cheers, unSpawn

Re: [Rkhunter-users] rkhunter-1.2.9.tar.gz

file? [17:22:00] WARNING, found: /dev/.udevdb (directory) Check rkhunter.conf and you'll see this one commented out as allowed. Uncomment and you're good to go. Thank you for your help. Thank you for your support. Cheers, unSpawn Concerned about your privacy? Instantly send FREE secure

Re: [Rkhunter-users] FC4 x86_64

1.2.8 is running Please upgrade to version 1.2.9, it's been out for a few months now, see http://sourceforge.net/project/showfiles.php?group_id=155034. Cheers, unSpawn Concerned about your privacy? Instantly send FREE secure email, no account required http://www.hushmail.com/send?l=480 Get

Re: [Rkhunter-users] bad hash

. Cheers, unSpawn Concerned about your privacy? Instantly send FREE secure email, no account required http://www.hushmail.com/send?l=480 Get the best prices on SSL certificates from Hushmail https://www.hushssl.com?l=485

Re: [Rkhunter-users] Fresh install FC6

and *attach* your full rkhunter.log if you can. Thanks in advance. Regards, unSpawn Concerned about your privacy? Instantly send FREE secure email, no account required http://www.hushmail.com/send?l=480 Get the best prices on SSL certificates from Hushmail https://www.hushssl.com?l=485

Re: [Rkhunter-users] Strange Fedora 6 MD5 results

most likely FC[456] prelinking issue: see for instance http://sourceforge.net/mailarchive/message.php?msg_id=37207262 and http://sourceforge.net/mailarchive/message.php?msg_id=37207264. Please see the FAQ for details. HTH. If not, let us know. Cheers, unSpawn Concerned about your privacy

Re: [Rkhunter-users] RE FC6 fresh install. GOT IT :D

current ruleset and you think it's something we should look at, could you please open a SF ticket and attach the related AVC messages? TIA Wishing you all a prosperous new year, unSpawn Concerned about your privacy? Instantly send FREE secure email, no account required http

Re: [Rkhunter-users] undetected kit upload instructions?

developers: make a SF tracker entry and upload an archive or send me a D/L location I can fetch it from. If you make a tracker entry please password the archive and send me the pass in a separate email. TIA Regards, unSpawn Concerned about your privacy? Instantly send FREE secure email

Re: [Rkhunter-users] Problem with sourceforge?

On Thu, 04 Jan 2007 05:31:02 +0100 Dennis Duffner [EMAIL PROTECTED] wrote: I tried to run rkhunter --update and got an error while fetching file for the mirror file. Thanks for the alert Dennis, should be fixed now. Cheers, unSpawn Concerned about your privacy? Instantly send FREE secure

Re: [Rkhunter-users] Unknown version numbers

All, An update is out now which should fix version check problems. Thanks to all who reported them. Cheers, unSpawn Concerned about your privacy? Instantly send FREE secure email, no account required http://www.hushmail.com/send?l=480 Get the best prices on SSL certificates from

Re: [Rkhunter-users] known issues with imagemagick?

use prelinking, but after performing some updates, all, or some, binaries are 'BAD' when running the MD5 hash check. What can I do? If that's not it please let us know. Cheers, unSpawn Concerned about your privacy? Instantly send FREE secure email, no account required http

Re: [Rkhunter-users] OpenSSL 0.9.8a unknown version

. You know what to do. Cheers, unSpawn Concerned about your privacy? Instantly send FREE secure email, no account required http://www.hushmail.com/send?l=480 Get the best prices on SSL certificates from Hushmail https://www.hushssl.com?l=485

Re: [Rkhunter-users] rootkit or not a rootkit, that is the question

it to tweak things a bit. Cheers, unSpawn Concerned about your privacy? Instantly send FREE secure email, no account required http://www.hushmail.com/send?l=480 Get the best prices on SSL certificates from Hushmail https://www.hushssl.com?l=485

Re: [Rkhunter-users] Ubuntu directories, suspicious files and versions

://sourceforge.net/project/showfiles.php?group_id=155034. (After 1.2.8 the project was taken over so basically rootkit.nl basically still emits the wrong info which I'm trying to get changed.) Cheers, unSpawn Concerned about your privacy? Instantly send FREE secure email, no account required

Re: [Rkhunter-users] some bad or unknown hashes.

=35179group_id= 155034) for instructions. If it then still won't work please let us know. Regards, unSpawn Concerned about your privacy? Instantly send FREE secure email, no account required http://www.hushmail.com/send?l=480 Get the best prices on SSL certificates from Hushmail https

Re: [Rkhunter-users] Incorrect Hashes

. Please see this mailing lists archives or the (online) FAQ for details. If it doesn't work for you let us know, OK? Cheers, unSpawn Concerned about your privacy? Instantly send FREE secure email, no account required http://www.hushmail.com/send?l=480 Get the best prices on SSL certificates

Re: [Rkhunter-users] What does BAD mean?

the (accompanying/online) FAQ or mailing list archives for details first (and then run hashupd). Regards, unSpawn Concerned about your privacy? Instantly send FREE secure email, no account required http://www.hushmail.com/send?l=480 Get the best prices on SSL certificates from Hushmail https

Re: [Rkhunter-users] Problem with PHP in version verification

[ OK ] So it turns out the version seems OK. Did you check the FAQ, esp. chap. 4.3 I get warnings from PHP? Regards, unSpawn Concerned about your privacy? Instantly send FREE secure email, no account required http://www.hushmail.com/send?l=480 Get

Re: [Rkhunter-users] Problem with PHP in version verification

to RKH but to PHP. RKH just passes through PHP errors you apparently already had like double loading of modules, lack of php-domxml et cetera, et cetera. The purpose of this mailing list is to help fix problems with running RKH, unfortunately not for fixing your PHP problems. Regards, unSpawn

Re: [Rkhunter-users] Unknown Versions (FreeBSD 6.2)

On Sat, 20 Jan 2007 19:13:20 +0100 Avalon [EMAIL PROTECTED] wrote: * Application version scan - Bind DNS 9.3.3 [ Unknown ] - OpenSSL 0.9.7e-p1 [ Unknown ] - OpenSSH 4.5p1 [ Unknown ] Thanks, I'll add those to the db. Regards, unSpawn Concerned about your privacy

Re: [Rkhunter-users] Unknown Versions (FreeBSD 6.2)

much* appreciate it if you could work with us on that by adding patches or rough PoC code to our SF tracker. (BTW if anyone needed an invitation to do so: this is it :-] ) Regards, unSpawn Concerned about your privacy? Instantly send FREE secure email, no account required http

Re: [Rkhunter-users] OpenSSL 0.9.7f [ Old or patched version ]

for that. Thanks for your understanding. Regards, unSpawn Concerned about your privacy? Instantly send FREE secure email, no account required http://www.hushmail.com/send?l=480 Get the best prices on SSL certificates from Hushmail https://www.hushssl.com?l=485

Re: [Rkhunter-users] SLES 10 [nopub]

(SLES10) Are you sure you --update RKH? Current OpenSSL versions are 0.9.7h, 0.9.7i and of the 0.9 tree 0.9.8a *is* in the database? Regards, unSpawn Concerned about your privacy? Instantly send FREE secure email, no account required http://www.hushmail.com/send?l=480 Get the best prices on SSL

Re: [Rkhunter-users] unusual files found

/path/to/rkhunter --your-flags-here 21 /tmp/rkhunter.debug and rkhunter.log. Regards, unSpawn Concerned about your privacy? Instantly send FREE secure email, no account required http://www.hushmail.com/send?l=480 Get the best prices on SSL certificates from Hushmail https://www.hushssl.com

Re: [Rkhunter-users] unusual files found

I missed that bit. And yes, you're absolutely right, 1.2.8 is unsupported. Michael: please upgrade. Thanks Nils! Regards, unSpawn Concerned about your privacy? Instantly send FREE secure email, no account required http://www.hushmail.com/send?l=480 Get the best prices on SSL certificates

Re: [Rkhunter-users] ssh backdoor? and something more

a proverbial Christmas tree... ps where i send the binaries? I think your first priority is mitigating the situation. Then, if you got time, I'd appreciate a reply with a temporary D/L location I can fetch the tarball from myself. Thanks in advance. Regards, unSpawn -- Click to become

Re: [Rkhunter-users] syslog remote logging detection

(backported fixes) or should you really be using 1.4.6? Regards, unSpawn -- Click to refinance, fast free, no lender fee, approval today http://tagline.hushmail.com/fc/CAaCXv1QYGNr5iNmQeq5vfBJjpGkwvJb/ - Take Surveys. Earn

Re: [Rkhunter-users] was Re: Warning Found - Now Dev suggestion

the boilerplate (not the default) would be icing on the cake. Hmm. That may be a good idea. Thanks. I'll add it to the todo list and discuss this in devel. Just a thought, Thanks for sharing. Regards, unSpawn Click for estimates on vinyl siding, 200% stronger and lower cost http

Re: [Rkhunter-users] Rootkit Hunter has found some bad or unknown hashes.

-users If that doesn't apply to your situation please reply after reading. Thanks in advance. Regards, unSpawn -- Click for free info on criminal justice degrees and make $150K/ year http://tagline.hushmail.com/fc/CAaCXv1S4xznoBcSWFtGY3A6oD89cK8k

Re: [Rkhunter-users] Bad hash /usr/bin/file

/mailarchive/forum.php?forum=rkhunter-users / http://sourceforge.net/docman/display_doc.php?docid=35179group_id=1 55034 ) talk about updating local hash changes with hashupd. If that does not work for you we'd sure like to hear more. Regards, unSpawn -- Click for interest only loan, fast no lender fee

Re: [Rkhunter-users] Bad hash /usr/bin/file

a filesystem integrity checker (Aide, Samhain, Osiris, tripwire, etc, etc) or a package manager that can verify package *contents*, then checking the MD5/SHA1 of the current binary against that of the binary from a repo should be a starting point. Regards, unSpawn -- Click for free information

Re: [Rkhunter-users] problems with rkhunter

before you, haven't recently updated Hashupd I'm afraid. Maybe I should make it compat for the remaining time. Anyway. Could you attach the output of running bash -x hashupd.sh (args you use) /tmp/errorlog 21? TIA Regards, unSpawn -- Click to publish your book fast with high quality presses

[Rkhunter-users] Intermediate update of RKH-1.2.9 os.dat

-1.3.0 release the problem 'hashupd' tries to correct will be gone. Best regards, unSpawn -- Click here to find a massage therapy school near you. http://tagline.hushmail.com/fc/CAaCXv1JMXcDlqTtlA7kciLoWsurb1RO

Re: [Rkhunter-users] mechdarwin psybnc rootkit not found by rkhunter

on the dir(s) the mech files are in. Regards, unSpawn -- Save thousands by getting out of debt the right way. Click here! http://tagline.hushmail.com/fc/CAaCXv1KVc4HZVtFnUDrneghJeWr3OIl/ - This SF.net email is sponsored

Re: [Rkhunter-users] cvs edition logfile questions for Bourne shell replacements

. And that is what, next to hashes, attributes, extended attributes, the file properties checks for. Question 2 Can I modify a file to remove the warnings and where? In rkhunter.conf, see 'SCRIPTWHITELIST' whitelisting. Regards, unSpawn -- Click to become a massage therapist and work

Re: [Rkhunter-users] questions about rkhunter

to enable logging though. 2. Is there a way to run rkhunter in a cron job and if there is an issue to alert by email? You mean the supplied cronjob doesn't work? Regards, unSpawn -- Get a Film Degree at a school near you. Get free info. Click Here. http://tagline.hushmail.com/fc

Re: [Rkhunter-users] RHEL5/prelink

performing some updates, all, or some, binaries are 'BAD' when running the MD5 hash check, then it would be good to post specific info. Regards, unSpawn -- Why not be a nutritionist? Get your degree fast. Click here! http://tagline.hushmail.com/fc/CAaCXv1aE75Dwp7iCMsgzVut3yGZAQtJ

Re: [Rkhunter-users] suse 10.1

if you write in english, ppl in here will understand your question ;) Forgot that. Good one. unSpawn -- Click here to find a massage therapy school near you. http://tagline.hushmail.com/fc/CAaCXv1JMXTVcaaChPWC8suAfPWnM6fF

Re: [Rkhunter-users] suse 10.1

should verify the items against your distributions package managers database and if you check rkhunter.conf you see these can be whitelisted and are already there, but as examples and commented out. Verify first, then whitelist. Regards, unSpawn -- Nutrition degrees online - Make up to $100

Re: [Rkhunter-users] broken link in cvs readme for skdet?

On Tue, 19 Jun 2007 06:41:31 +0200 Gordy [EMAIL PROTECTED] wrote: CVS readme version 1.15 has this link http://slider.decebal.org/code/skdet/ I can not get this or the domain to work. Good one. Seems the domain is gone. I temporarily upped the tarball to http://www.rootshell.be/~unspawn

Re: [Rkhunter-users] WHM 10.8.0 files giving off warning flags

or otherwise log in as root, right?), then you could mail them out to your external address or scp them to another system. Before posting you should scrub the parts of the report that don't need addressing. Cheers, unSpawn -- Click to become a master chef, own a restaurant and make millions

Re: [Rkhunter-users] Suspected rootkit - Tilapia

files on your VFS from the files that are verified by your RPM database (maybe stay safe booting HELIX), or else try to send info from lsof -w -n PID where PID is the PID of the actual process. Cheers, unSpawn -- Catholic Singles - Free to Join. 1000's of people to view. Click here. http

Re: [Rkhunter-users] got a bad hash

Sorry, hunches don't cut it in my book. You either verify and *know* it's safe or you don't, anything else is a waste of time and money. Cheers, unSpawn -- Click to become a master chef, own a restaurant and make millions http://tagline.hushmail.com/fc

Re: [Rkhunter-users] Suspected rootkit - Tilapia

On Fri, 29 Jun 2007 00:35:54 +0200 Jeff Peeler [EMAIL PROTECTED] wrote: Minor detail, but I think you'll need a -p before the PID. lsof - w -n -p PID Actually *not* so minor a detail. Thanks for adding! Cheers, unSpawn -- Turn your passion into a profession. Click here to find a film school

[Rkhunter-users] Rootkit Hunter announces beta release 1.3.0

of 1.3.0. Note 1.3.0 can be installed if you already run 1.2.9: just run 'installer.sh --examples' for examples and details. Thanks for helping us help you. Best regards, unSpawn -- Click to become an artist and quit your boring job http://tagline.hushmail.com/fc

Re: [Rkhunter-users] Problems with V 1.3.0

=' should do. Cheers, unSpawn -- HASH(0x8879cd8) HASH(0x8873fd0) http://tagline.hushmail.com/fc/Ioyw6h4dkckTSkKRMBuQrVhDKVxV1dGIoAMeG7dKHwH9yx5Kkdib8c/ - This SF.net email is sponsored by: Splunk Inc. Still grepping through

Re: [Rkhunter-users] rkhunter-1.3.0 false warnings (hopefully;-))

be smooth sailing. #I have had disabled root access since rkhunter-1.2.9. Therefore I think rkhunter-1.3.0 gave me a false positive. What does the log say exactly? Cheers, unSpawn -- HASH(0x8bd1148) HASH(0x8be82a4) http://tagline.hushmail.com/fc

Re: [Rkhunter-users] Problems with V 1.3.0

TARBALL (please) to our Sourceforge tracker and please list any system, installation or configuration details or changes you made you think are relevant. TIA, unSpawn -- HASH(0x8bd0358) HASH(0x8bcaf28) http://tagline.hushmail.com/fc/Ioyw6h4fRLVlHdUxhbtFbvbJH9ghjLlJtsR8t4YRo7h2YBnbAxx1C4

Re: [Rkhunter-users] Newbie update

gave you and inspect the box using it as a checklist. TIA, unSpawn -- Save hundreds on a Study Abroad Program - Click here. http://tagline.hushmail.com/fc/Ioyw6h4dFF9dMjcQqEtVSBz8MAlo7smCLGlBnXHn6L72MBhzv3Oh3a

Re: [Rkhunter-users] Lofgile of rkhunter

not. Cheers, unSpawn -- Inventors: Does your idea have potential for millions? Click for info http://tagline.hushmail.com/fc/Ioyw6h4dkckghdSGSwH95Eelb80JzuSAAJNty0WFfzfosJsr8BAKkg/ - This SF.net email is sponsored by: Splunk Inc

Re: [Rkhunter-users] Problems with 1.30 after upgrade

the parent directories leading up to i18n exist and where the i18n directory ended up? If there's none, could you run the installer as sh -x installer.sh --layout default --install 21/tmp/rkhinst.log and *attach* the log? TIA, unSpawn -- Turn your passion into a profession. Click here to find a film

Re: [Rkhunter-users] False rkhunter alarm in debian 4.0

case this file is part of the slice package. Good one, thanks for notifying. Maybe we should allow a whitelist for /path/to/cmd's, that is, only if attributes like hash check out OK. Cheers, unSpawn -- Click here to find a massage therapy school near you. http://tagline.hushmail.com/fc

Re: [Rkhunter-users] Tried 1.3.0

1.3.0 brings it wouldn't exactly be progress to keep using 1.2.9 and besides that our team isn't big enough to maintain and support two trees. Regards, unSpawn -- Are you Catholic and single? Click Here. http://tagline.hushmail.com/fc/Ioyw6h4fMOF5kYs8EXvusztBnqOam3vvltsQhMab4JPwNGQmj4vmbG

Re: [Rkhunter-users] Rkhunter found problems

/intruder_detection_checklist.html, which could serve as a checklist in a worst case scenario or if you think you found more evidence of a compromise. Regards, unSpawn -- Click to become an artist and quit your boring job. http://tagline.hushmail.com/fc

Re: [Rkhunter-users] t0rn rootkit on ubuntu 7.04 (latest patches installed)

at http://www.linuxquestions.org/questions/forumdisplay.php?f=4 for the past years. To make sure you post all relevant info please also read and act on the Intruder Detection Checklist (CERT): http://www.cert.org/tech_tips/intruder_detection_checklist.html. Regards, unSpawn -- Click and get

Re: [Rkhunter-users] Parallels eth adapter detected as promiscuous

you want to share? How about testing 1.3.0 if you have time to spare? Regards, unSpawn -- Click to learn how to become a world famous writer or poet. http://tagline.hushmail.com/fc/Ioyw6h4d5YUxnkNpimjgwKM3sxE28lXuYHmVfgFDHPfsw3GBFI03k8

Re: [Rkhunter-users] Detection failure after missing stringstest.dat

at least reproduce the situation and run RKH again to produce a debug log? * If you can then please bzip2 the log before attaching and send it directly to John Horne and me. Regards, unSpawn - This SF.net email is sponsored

Re: [Rkhunter-users] Unusual warning

, 4.4? Does your system use prelinking? Cheers, unSpawn N.N.: Please *subscribe* to the list before posting. Else you will not be able to post a follow-up. - This SF.net email is sponsored by: Splunk Inc. Still grepping

Re: [Rkhunter-users] usr/bin/sed warning

you post full log lines please? Cheers, unSpawn - This SF.net email is sponsored by: Splunk Inc. Still grepping through log files to find problems? Stop. Now Search log events and configuration files using AJAX and a browser

Re: [Rkhunter-users] usr/bin/sed warning

of the db off-site) like Aide, Samhain or even tripwire, now is the time to use it :-] Cheers, unSpawn N.N.: Do keep it on the list, for archival purposes, unless explicitly asked otherwise. - This SF.net email is sponsored

Re: [Rkhunter-users] Some questions after upgrade

On Tue, 23 Oct 2007 18:16:08 +0200 John Horne [EMAIL PROTECTED] wrote: On Tue, 2007-10-23 at 15:57 +0100, Arthur Dent wrote: Thanks in advance for your answers and thanks very much to unSpawn and all the RKH rpoject team for all their efforts in providing us with such a great product

Re: [Rkhunter-users] Fix errors

Hello. On Sun, 11 Nov 2007 11:44:52 +0100 Mike Blezien [EMAIL PROTECTED] wrote: Warning: No hash value found for file '/bin/grep' in the rkhunter.dat file. how can this be fixed. Did you --propupd after you installed RKH? Cheers, unSpawn -- Click for an accredited Life Experience Degree

Re: [Rkhunter-users] rkhunter signing key

not be used for correspondence. Cheers, unSpawn -- Why not be a nutritionist? Get your degree fast. Click here! http://tagline.hushmail.com/fc/Ioyw6h4fMaOEUMVsU11ItBrPyzADv1DqgEzO9UL31XOoisC0sltrmI/ - SF.Net email is sponsored

Re: [Rkhunter-users] feedback for Dick - unhide stops box

, unSpawn -- Save hundreds on a Study Abroad Program - Click here. http://tagline.hushmail.com/fc/Ioyw6h4dFF9GiDCRfLWMVB3kV0dKnxaGAoG7Bblvf2dzTSJUoHOiFS/ - SF.Net email is sponsored by: The Future of Linux Business White Paper

Re: [Rkhunter-users] missing hashes 3

and John? -- Reconnect with your classmates. Click here for information on your classmate reunion. http://tagline.hushmail.com/fc/Ioyw6h4fIDWskZcc2TRuDMuHpQ6yzIGQ9L1gVvDy2fgfmUlPgful5u/ TIA, unSpawn - This SF.net email

Re: [Rkhunter-users] Bitte um Hilfe

checks. Regards, unSpawn -- Click here for a free search to find an interior design school near you. http://tagline.hushmail.com/fc/Ioyw6h4fQpA7RX16SfsSrYMjgDjzwvsOs5KGrdOzvpNbOaI25jDt6Y/ - This SF.net email is sponsored

Re: [Rkhunter-users] General Questions

://tagline.hushmail.com/fc/Ioyw6h4d50m15C14MH80zrh5wBPULHps1diwtQ2ijoxgObzcF88iEQ/ Regards, unSpawn - This SF.net email is sponsored by: Microsoft Defy all challenges. Microsoft(R) Visual Studio 2008. http://clk.atdmt.com/MRT/go

Re: [Rkhunter-users] Bitte um Hilfe

On Wed, 23 Jan 2008 01:11:29 +0100 Jim Knuth [EMAIL PROTECTED] wrote: Am 23.01.2008 1:04 Uhr, schrieb [EMAIL PROTECTED]: (BTW, I let this one tru the admin interface: please subscribe to the list before posting a reply) do you mean me? I`ve subscribe the list (??) Heh, no, not you. unSpawn

Re: [Rkhunter-users] rk stuff

in debug mode, compress the log an *attach* it. Thanks in advance. Regards, unSpawn -- Click to find local singles for dating, romance and fun. http://tagline.hushmail.com/fc/Ioyw6h4emKaX1RhvAMIwl4umUdrOycyXIkoTUHwtsuekaufvvTd4kQ

Re: [Rkhunter-users] rkhunter 1.3.0 and building and rpm

'. -- Learn digital and video photography techniques, lighting and printing. Click now. http://tagline.hushmail.com/fc/Ioyw6h4fQtDiJFnYbGD3XQ0fSxuBNDsmUuOLKad1U9YiU6BxfVavdu/ Regards, unSpawn - This SF.net email is sponsored

Re: [Rkhunter-users] Possible GasKit rootkit ?

/fc/Ioyw6h4dDpF0Xww0CKNB4mEZClMFtdEkwVX1eMBLlt9yFbgpCVV70k/ Cheers, unSpawn - This SF.net email is sponsored by: Microsoft Defy all challenges. Microsoft(R) Visual Studio 2008. http://clk.atdmt.com/MRT/go/vse012070mrt/direct

Re: [Rkhunter-users] Upgraded to 1.3.0 from 1.2.9 - some comments

On Sat, 23 Feb 2008 00:43:57 +0100 Michael Mansour [EMAIL PROTECTED] wrote: ie. the /etc/syslog.conf is not used in rsyslog, instead it's /etc/rsyslog.conf Thanks for reporting. This was fixed earlier on in CVS. Please test. TIA, unSpawn -- Improve your personal appearance with a great

Re: [Rkhunter-users] Suggestion for rkhunter 1.3.0

. -- Click for your daily horoscope, learn about money, love family. http://tagline.hushmail.com/fc/Ioyw6h4c4ZAveHwzQqcNckVuDXe7dzUmIh1rr16wG5TWeOMnBwn8g4/ Regards, unSpawn - This SF.net email is sponsored by: Microsoft Defy all

Re: [Rkhunter-users] rkhunter 1.3.0 on 64bit linux

for this issue too and report back issue (if any)? -- Click for free info on earning your associates degrees. http://tagline.hushmail.com/fc/Ioyw6h4dDtIiVbc3TbA8XOZvVhVXg2ZDiAyDMfBL32TcJd61FG0VCg/ Regards, unSpawn

[Rkhunter-users] Rootkit Hunter release 1.3.2

on the rkhunter-users mailing list. I again thank John Horne. Without his efforts this release was not possible. -- Low cost Handyman Franchise. Click Now! http://tagline.hushmail.com/fc/Ioyw6h4fMygi5O2eHIk1EVOaa77jeATa5KCFMggVHojvmeQP8arryA/ Best regards, unSpawn

Re: [Rkhunter-users] How to check that ....deleted files check....results are not false positives?

(). (It's part of a tarball I uploaded to one of the RKH bug tracker items to test a standalone version of suspscan.) Regards, unSpawn -- Right on time. Click now for great project management software! http://tagline.hushmail.com/fc/Ioyw6h4dJ9PIoVGWJV08fs8oOyj8y9Vx09sseZREAlbpaNGeJiIBhO

Re: [Rkhunter-users] Update Failed

make sure to read the docs. Cheers, unSpawn -- Click for free info on online doctorate degrees and make up to $250k/ year. http://tagline.hushmail.com/fc/Ioyw6h4fHEvK46pD6YAZ1KPywanSztdaNpERRuLMJyl0VL0WfTvdjK/ - Check out

Re: [Rkhunter-users] One ALLOWPROCDELFILE entry is ignored

there's no length enforced AFAIK. Attaching a bzipped debug run log to a reply John and me could give clues, now I have naught. -- Click to make millions by owning your own franchise. http://tagline.hushmail.com/fc/Ioyw6h4eB4pSH5sa5NdcIKiQqst5Bb6YpR8ZwLUPkk3rApmy0N9iDm/ TIA, unSpawn

Re: [Rkhunter-users] strange listening port on opensuse 10.2

). If you're curious you could telnet to the port before that to see what it answers with but if there's doubts about consequences you better not. Good luck. Cheers, unSpawn --- -- Click for free information on accounting careers, $150/hour potential. http://tagline.hushmail.com/fc

Re: [Rkhunter-users] RFE: no warning for tcb enabled system

. Cheers, unSpawn --- -- Click to find local singles for dating, romance and fun http://tagline.hushmail.com/fc/Ioyw6h4emOf9Wb7gAKZSsYbFGdgZMVP8U6QiQ4tA0ygwccvXAfpDqw/ - This SF.net email is sponsored by: Microsoft Defy all

Re: [Rkhunter-users] doubt about ident warning menssege..

queries to your machine on port TCP/113. This service is only necessary if remote mail or IRC servers require it. If you don't need it then you could disable the service. Regards, unSpawn --- -- Save hundreds on an Unsecured Loan - Click here. http://tagline.hushmail.com/fc

Re: [Rkhunter-users] Mail list and welcome mail may need updating.

aussie english that suggests the most recent version is 1.2.9. Eagle eyes ;-p any chance the dev team member who looks after this could look into at some time please That'll be me then. Thanks for notifying, I've changed it. Regards, unSpawn --- -- Smart Girls Secret Weapon Read Unbiased

Re: [Rkhunter-users] doubt about ident warning menssege..

is helpful on a squid server too, and there may be some other services. Thanks. You're right I should have said if any services require it. Regards, unSpawn --- -- Sweepstakes!!! Enter for your chance to WIN a summer spa getaway! http://tagline.hushmail.com/fc

Re: [Rkhunter-users] Enc: Re: doubt about ident warning menssege..

necessary. Isnt a good ideia to create a wiki that explains all warning messages in detail?? Sure. Want to start one? :-] Regards, unSpawn --- -- Smart Girls Secret Weapon Read Unbiased Beauty Product Reviews, Get Helpful Tips, Tricks and Sam http://tagline.hushmail.com/fc

Re: [Rkhunter-users] CentOS 5.2 Support?

installation review and change your configuration file, then run 'rkhunter --propudp'. 'hashupd' is not used after v1.2.9. Regards, unSpawn --- -- Click for your daily horoscope, learn about money, love amp; family. http://tagline.hushmail.com/fc

Re: [Rkhunter-users] CentOS 5.2 Support?

On Fri, 04 Jul 2008 20:19:56 +0200 Frank Murphy [EMAIL PROTECTED] wrote: Maybe the list-mainter can update the welcome letter? I'm (almost, heh) certain I did recently, after one of our other list members mentioned it. I'll check the text again. Regards, unSpawn --- -- Fix your credit report

Re: [Rkhunter-users] rkhunter --cronjob bug?

* * * /usr/local/bin/rkhunter --cronjob --update -- rwo * Note this FAQ item contains aproximately 70 more lines, please do read, thanks. Regards, unSpawn --- -- Smart Girls Secret Weapon Read Unbiased Beauty Product Reviews, Get Helpful Tips, Tricks and Sam http://tagline.hushmail.com/fc

Re: [Rkhunter-users] rkhunter --cronjob bug?

. So, and not to turn this into an RTF(ine)M type of answer, but could it be instead that the confusion you experience is just the effect of you not being acquainted with RKH and didn't read any documentation before using it? Regards, unSpawn --- -- Sweepstakes!!! Enter for your chance

Re: [Rkhunter-users] warnings

. Regards, unSpawn --- -- Enter for Your Chance to WIN* The TotalBeauty.com Summer Spa Sweepstakes! http://tagline.hushmail.com/fc/JKFkuIjyZ57pdwGt6vJVbSSOFhc1houAgYBKK54ceA9OxdOe9Gej7q/ - Sponsored by: SourceForge.net Community

Re: [Rkhunter-users] Where is the public key for the .asc file

itself is not revoked, invalid or expired. Regards, unSpawn --- -- Click to become a master chef, own a restaurant and make millions. http://tagline.hushmail.com/fc/Ioyw6h4eAFcrubA0wSwJGDHdNT7xgzLBmvwUS8lPEvwRQphQPckuNy

Re: [Rkhunter-users] Where is the public key for the .asc file

have problems with this. Thanks, unSpawn --- -- Click to become a master chef, own a restaurant and make millions. http://tagline.hushmail.com/fc/Ioyw6h4eAFcIDmVfplP4IYWC65vcRn0sA9bAHHD5sKtvQIzMHOHToM/ - This SF.Net email

Re: [Rkhunter-users] Where is the public key for the .asc file

On Mon, 28 Jul 2008 16:24:05 +0200 Andreiv [EMAIL PROTECTED] wrote: There is a very weak association between the key id and rkhunter Apart from publishing the public part of the key, what can you recommend? Regards, unSpawn --- -- Has your car been in an accident? Click now and know

Re: [Rkhunter-users] is this a intrusion?

contents with trusted remote copies. regards, unSpawn --- -- Explore all of Europe's beauty! Click now for great vacation packages! http://tagline.hushmail.com/fc/Ioyw6h4ePhmFPHDIO78mrquFiOhqphNwNFjQYcZVdMLBMkzBe02jmA

Re: [Rkhunter-users] Why do I get this error running 1.3.2? Possible promiscuous interface.

-a 21; /path/ip -s link 21 ) | tee /path/logfile'? Thanks in andvance. Regards, unSpawn --- -- Explore all of Europe's beauty! Click now for great vacation packages! http://tagline.hushmail.com/fc/Ioyw6h4ePhlMY3tfIHjNn8Fl7buZv92prExv0zRgVsYwNsC91Msbcc

  1   2   3   >