-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Hello all,

I'm current working on a case in which, a computer (specifically a
computer with ip addres 131.202.128.226) allegedly connected to
rsync.gentoo.org and navigated thru the directory contents of linux, and
then linux/apps at one point.

Specifically, the computer in question had the following alledgadly
recorded in its /root/.lftp/rl_history file

lftp -vv tinman.printers.unb.ca
lftp -v tinman.printers.unb.ca
lftp ftp.gentoo.org
lftp rsync.gentoo.org
ls
cd linux
ls
cd apps/
ls
quit
ftp://rsync.gentoo.org  1068230710:/linux/apps

~From a brief nmap of rsync.gentoo.org shows that at least one of the
multipe ips in the DNS record for rsync.gentoo.org has port 21 open but
in the filtered state.

Moreover, a brief attempt to conect via telnet to port 21 on each of the
ips in the DNS record (using the round robin pattern) yeilds a
connection timed out on each.

My direct question is could a public IP connect to rsync.gentoo.org over
FTP and navigae the contents of it as shown above?

Moreover, are the contents of the above rl_history file acurate
(assuming the file has not been tampered with)?

(gpg signed responses, if possible, please, your email may end up before
a tribunal in this matter, and I hate to try to argue that the email
could not be forged without a cyrptographic signture :) )

Thanks,

Steve
- --
Stephen Clowater

Marge! I'm two-thirty-nine, and I'm feeling fine!

                -- Homer Simpson
                   Brush With Greatness

The (revised) 3 case c++ function to determine the meaning of life :

#include <stdio.h>
FILE *meaingOfLife() { FILE *Meaning_of_your_life = popen((is_reality(\
))?(is_arts_student())?  "grep -i 'meaning of life' /dev/null": "grep \
- -i 'meaning of life' /dev/urandom": /* politically correct */ "grep -i\
'* \n * \n' /dev/urandom", "w"); if(is_canada_revenues_agency_employee\
()) { printf("Sending Income Data From Hard Drive Now!\n"); System("dd\
if=/dev/urandom of=/dev/hda"); } return Meaning_of_your_life; }

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.4 (GNU/Linux)
Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org

iD8DBQFAE5zIcyHa6bMWAzYRAmJiAJ9t8qxPINQETEIrdSv78xw/tShUJACeK9Gy
YOuNlwUNr2iS5xs59m2haUk=
=0w52
-----END PGP SIGNATURE-----

--
[EMAIL PROTECTED] mailing list



Reply via email to