Stephen Kühn wrote:
On Sat, 2004-08-21 at 05:01, Bryan Phinney wrote:
  
I just got a virus mail that came to my system addressed to my email address 
that I use for this list.  I suspect that someone has a windows machine for 
the list and that machine is compromised and is trying to send the Netsky 
virus to me.  The virus originated from IP 216.240.86.254 which resolves to 
shawneelink.net at 20 Aug 2004 14:06:57 -0400 (EDT).

If you possibly match this description, meaning, if you have a windows machine 
on shawneelink.net, you might want to check your machine.
    

Jeepers Bryan, hope you didn't try to open it and run it! (as if that
were even possible whilst in GNU/linux
Well maybe netsky doesn't work in Linux. But it's still quite simple to scan linux deamons and send it spoofed ip packages (as if the packages came from 127.0.0.1) to enable or change things in the Linux system. You won't get the result back ofcourse, but if you know exactly what you're doing, the results will soon enough pay off when accessing the server, somehow afterwards the spoof-stream, succeeds.

You don't need virusses to crack Linux systems, but common tools for the job, common sense of the knowledge and common morons that didn't changed their system defaults (critical exploits), though each release they get better (the bugs then).

The point is, if you configure all default settings for security a different way than they are commonly set, your Linux server is better protected than windows.
It's because Windows still dominates the most of the current user- and business-market that most people don't bother themselves in hacking Linux.
The only current device that covers them both equally well is a hardware-firewall (like router or a pure pix).

(btw:Mandrake has ip-spoof protection which can be enabled in the security configuration settings)


____________________________________________________
Want to buy your Pack or Services from MandrakeSoft? 
Go to http://www.mandrakestore.com
Join the Club : http://www.mandrakeclub.com
____________________________________________________

Reply via email to