Re: spaces in filenames

2000-12-26 Thread Adi Stav

On Wed, Dec 27, 2000 at 12:55:19AM +0200, Nadav Har'El wrote:
> On Tue, Dec 26, 2000, Adi Stav wrote about "Re: spaces in filenames":
> > Speaking of, by the way, I wonder why almost everybody I've seen who
> > digs smart xterm titles uses the cd trick instead of something like:
> > 
> > PS1_SIMPLE="\h: \w "
> > PS1="\[\033]0;${PS1_SIMPLE}\007\]${PS1_SIMPLE}"
> 
> Maybe because your solution (at first glance - I didn't try it) changes the
> title on every prompt? This is a waste of bandwidth (though you won't notice
> it unless you have a slow line - e.g., log in to a computer abroad, or
> use a slow modem, or worse - a slow X connection). In some window managers it
> may also cause the title to flash on every prompt (though if it does, it's a
> bug that needs to be corrected in the window manager).
> 
> Anyway, your solution isn't bad - it's just that there's a more efficient
> solution: to only change the title when it needs changing, i.e., when the
> current directory has changed.

Ah, no. We are talking about five bytes here (plus the length of the
title). And since it will arrive through telnet (or equivalent)
together with the rest of the prompt, in normal use it will occupy a
very small single packet that has to be sent anyway, if only for the
newline. So there will generally be no latency problem even with very
slow modems.

I don't like the cd aliasing solution because it feels kludgy: what it
the cwd changes not because of cd (like choo pointed out)? What if you
want to display data other than your cwd in the title? Anyhow, if
efficiency is an principal thing, I suggest caching:

CURRENT_TITLE=""
retitle() {
OLD_TITLE="$CURRENT_TITLE"
CURRENT_TITLE="$*"
[ "$CURRENT_TITLE" != "$OLD_TITLE" ] && \
echo -n "\033]2;${CURRENT_TITLE}\007"
}
export PS1='\[`retitle whatever`\]whatever'

Warning: I haven't checked this one, don't have X at the moment.

> By the way, in zsh there's an even more elegant solution (if anybody got
> the impression that I'm an avid zsh advocate, they are right): zsh's
> standard 'cd' builtin runs a user-define function 'chpwd' after changing
> the directory, if such a function exists. So all you need to do is to
> add something like the following to your .zshrc (no need for 'cd' functions
> or aliases):
> 
> chpwd(){
> case "$TERM" in
> xterm|screen)   print -n '\033]2;'"$LOGNAME@$SYS":$PWD'\007';;
> esac
> }
> chpwd   # run this once in the .zshrc to show the initial current directory

Did you manage to get it working with screen? Screen ate my control
characters when I tried it...


- Adi Stav

=
To unsubscribe, send mail to [EMAIL PROTECTED] with
the word "unsubscribe" in the message body, e.g., run the command
echo unsubscribe | mail [EMAIL PROTECTED]




Re: ipchains

2000-12-26 Thread Stanislav Malyshev a.k.a Frodo

AO>> Using copyrighted material which you do not own is illegal.
AO>> Storing mp3 SONGS that you did not buy/have the disk is 

Now you seem to assume every MP3 song is illegal copyrighted
material. MPAA would laugh in joy reading this. They have enormous success
in delegitimizing innocent file format and linking it with illegal
activities - to the border that some ISPs install cron jobs to delete all
MP3 files found on their clients' (!!!) sites. Good to know you support
them. 

AO>> basically illegal, I'm sure you can find alot of sources
AO>> on the web about this. (See Metallica VS. Napster)

Oh, yeah - good old Metallica needs another PR campaign. For free is even
better. What's the current hot topic? Oh, MP3, "pirating". Guys, lets'
start to work - PR is the ongoing effort!
-- 
[EMAIL PROTECTED]  \/  There shall be counsels taken
Stanislav Malyshev  /\  Stronger than Morgul-spells
phone +972-3-9316425/\  JRRT LotR.
http://sharat.co.il/frodo/  whois:!SM8333


=
To unsubscribe, send mail to [EMAIL PROTECTED] with
the word "unsubscribe" in the message body, e.g., run the command
echo unsubscribe | mail [EMAIL PROTECTED]




Re: ipchains

2000-12-26 Thread Stanislav Malyshev a.k.a Frodo

AO>> 1 line more and you'll see I noted "related" packets,

That depends on how your firewall understands "related". If it understands
it as something more than current connection - install another firewall.

AO>> The target at the end of the process is slip a packet
AO>> through the gateway and into the computer running ICQ.

OK, this is explicitly allowed, we suppose, as long as packet is targeted
to the port that belongs to ICQ program.

AO>> What happened, if you could exploit a bug in the client, and make it
AO>> behave in a certain way?

Than it would be no different from bug in MSIE, ftp client or any program
dealing with internet data. This problem is not solved by
firewalling. This problem is solved by using quality software and reading
Bugtraq and praying to $DEITY_OF_CHOICE that you know about MSIE buffer
overflow before your neighbour script kiddie does.

AO>> What happened if "related" packets were sent with a tweak?
AO>> Let's say to another port, Would the firewall let it in? 

No. That why you have firewall - to allow only "kosher" packets and drop
all the rest. If you misconfigured your firewall as to allow other packets
- that's your problem, not ICQs.

AO>> This very much depends on which firewall and configuration 
AO>> but many times the answer would be Yes.

You are saying many sysadmins are dumb. Maybe yes, maybe not - but this is
certainly not inherent flaw in ICQ protocol - that's what we started with,
remember?

AO>> And how exactly do you plan to check if they are valid packets comming
AO>> from 
AO>> the right source? (note that i dropped the word UDP because in some
AO>> cases
AO>> it can be tcp, weak seq numbers)

ICQ does along very good with UDP alone. And I don't even want to check
"validity" of packet source, probably (though I could - the list of valid
ICQ servers is not so hard to get) - as long as all packets are delivered
to ICQ client, most I risk is that somebody will hurt user's ICQ
session. Not a major concern for me - this is ICQs problem, not company
security problem. ICQ as secure communication tunnel sucks enormous time,
but this is "contained" suckiness - it doesn't hutrt anything but ICQ.

AO>> DNS isn't the only thing that can be spoofed, basically anything can.

Tell me a good way to spoof live TCP session on Linux. Not one packet,
live session starting from the handshake. No, you are not on the same
network and cannot hear outgoing packets, that would be too easy.
-- 
[EMAIL PROTECTED]  \/  There shall be counsels taken
Stanislav Malyshev  /\  Stronger than Morgul-spells
phone +972-3-9316425/\  JRRT LotR.
http://sharat.co.il/frodo/  whois:!SM8333


=
To unsubscribe, send mail to [EMAIL PROTECTED] with
the word "unsubscribe" in the message body, e.g., run the command
echo unsubscribe | mail [EMAIL PROTECTED]




Re: Sending SMS messages by E-mail + Sending E-mail from an SMScellphone

2000-12-26 Thread Matan Ziv-Av


> How can I send an SMS message to an orange subscribe by E-mail, and how
> can I send an E-mail from an SMS capable cellular phone?

To send SMS to an orange (or cellcom) phone you need a script that was
sent to the list a few months ago, a computer that is connected to the
internet, and some procmail scripting.

To send Email by SMS you need a gateway that allows that. I don't know
of any in Israel that does. If you want to install such a gateway
yourself, and you already have a computer that is always connected to
the internet, all it will cost you is 500 NIS and a few hours of
programming.


-- 
Matan Ziv-Av. [EMAIL PROTECTED]


=
To unsubscribe, send mail to [EMAIL PROTECTED] with
the word "unsubscribe" in the message body, e.g., run the command
echo unsubscribe | mail [EMAIL PROTECTED]




Re: ipchains

2000-12-26 Thread Alon Oz

> 
> AO>> 2. It can receive connection to the ICQ port
> 
> Wrong. Firewall won't let incoming connection in. It would only allow to
> receive UDP packets inside "virtual circuit" created by outgoing
> connection.

1 line more and you'll see I noted "related" packets,
Since i noted a part of a process you can't break
it into parts and say "So what can you do with this part?"
The target at the end of the process is slip a packet
through the gateway and into the computer running ICQ.

> 
> AO>> 3. the NAT gateway/fw allows "related" packets to pass from icq to
> AO>>192.168.1.78
 
> Yes, so you can talk to gateway's forwarding port and to ICQ via it. So
> what?

What happened, if you could exploit a bug in the client, and make it
behave in a certain way?
What happened if "related" packets were sent with a tweak?
Let's say to another port, Would the firewall let it in? 
This very much depends on which firewall and configuration 
but many times the answer would be Yes.


> 
> AO>> 4. icq packets are classified as "related".
> AO>>
> AO>> Now any man-in-the-middle attack becomes very easy.
> AO>> You spoof your address (using known flaws in DNS)
> AO>> and easily get into the inner network.
> 
> Here you lost me. All you can do is to send packets to firewall's
> firwarding port, where they will be forwarded to ICQ's port on intranet
> computer, which will or process them, if they are valid UDP packets coming
> from the right source, or drop them. With skill, you can disrupt some ICQ
> session, but no more. Don't see "easily getting into inner network" here.

And how exactly do you plan to check if they are valid packets comming
from 
the right source? (note that i dropped the word UDP because in some
cases
it can be tcp, weak seq numbers)


> 
> BTW: this has nothing to do with DNS. No sane sysadmin bases firewall
> rules on DNS. Most firewalls won't even allow you to do this.

DNS isn't the only thing that can be spoofed, basically anything can.
and usually when you put a DNS based rule into the firewall its
simply translated to IP on the spot (and stayed with these values).


-- 
Alon Oz,
Aduva Research Team,
Mailto: [EMAIL PROTECTED]

--
A proud member in the Evil Linux cyberterrorist hackers (ELCH) 
organization
A who can launch Denial of Service attacks against the embedded devices
in your 6-slice toaster with advanced pingflood Open Source classified
exploit codes hidden inside strongly encrypted Russian mafia pornography
that innocent American children download from online gambling web sites 
located in the Northern Mariana Islands

=
To unsubscribe, send mail to [EMAIL PROTECTED] with
the word "unsubscribe" in the message body, e.g., run the command
echo unsubscribe | mail [EMAIL PROTECTED]




Re: ipchains

2000-12-26 Thread Alon Oz

"Stanislav Malyshev a.k.a Frodo" wrote:
> 
> AO>> Even if the CEO does. Seen any company that the users don't hold mp3s
> AO>> on their computers? It's illegal in the US and most startups are
> AO>> registered in the US.
> 
> MP3 format is illegal in US? News for me. Is WAV going to be banned too?

Using copyrighted material which you do not own is illegal.
Storing mp3 SONGS that you did not buy/have the disk is 
basically illegal, I'm sure you can find alot of sources
on the web about this. (See Metallica VS. Napster)

-- 
Alon Oz,
Aduva Research Team,
Mailto: [EMAIL PROTECTED]

--
A proud member in the Evil Linux cyberterrorist hackers (ELCH) 
organization
A who can launch Denial of Service attacks against the embedded devices
in your 6-slice toaster with advanced pingflood Open Source classified
exploit codes hidden inside strongly encrypted Russian mafia pornography
that innocent American children download from online gambling web sites 
located in the Northern Mariana Islands

=
To unsubscribe, send mail to [EMAIL PROTECTED] with
the word "unsubscribe" in the message body, e.g., run the command
echo unsubscribe | mail [EMAIL PROTECTED]




Sending SMS messages by E-mail + Sending E-mail from an SMS cellphone

2000-12-26 Thread Shlomi Fish


How can I send an SMS message to an orange subscribe by E-mail, and how
can I send an E-mail from an SMS capable cellular phone?

Regards,

Shlomi Fish



--
Shlomi Fish[EMAIL PROTECTED] 
Home Page: http://t2.technion.ac.il/~shlomif/
Home E-mail:   [EMAIL PROTECTED]

The prefix "God Said" has the extraordinary logical property of 
converting any statement that follows it into a true one.


=
To unsubscribe, send mail to [EMAIL PROTECTED] with
the word "unsubscribe" in the message body, e.g., run the command
echo unsubscribe | mail [EMAIL PROTECTED]




Re: New: Jewish Singles Email Group for Ages 30 Plus

2000-12-26 Thread Omer Zak

I sent a complaint to [EMAIL PROTECTED]  There are plenty of forums and
Web sites catering to the singles in Israel (Jewish or otherwise), and
Moses Ellias could have located them after 15 minutes of searching,
instead of wasting the time of Linux-IL subscribers.
 --- Omer
WARNING TO SPAMMERS:  see at http://www.zak.co.il/spamwarning.html


On Wed, 27 Dec 2000, Moses Ellias wrote:

[... snipped ...]

> I just want to let you know that there is a brand new Jewish Singles Mailing
> List for the 30 Plus age group.
> In it you can give out your personal information, or receive announcements
> about events in your area.


=
To unsubscribe, send mail to [EMAIL PROTECTED] with
the word "unsubscribe" in the message body, e.g., run the command
echo unsubscribe | mail [EMAIL PROTECTED]




New: Jewish Singles Email Group for Ages 30 Plus

2000-12-26 Thread Moses Ellias

Hello,

I "apologize" if this e-mail is a little off-topic. but I don't know how
else to get the word out!!!

I just want to let you know that there is a brand new Jewish Singles Mailing
List for the 30 Plus age group.
In it you can give out your personal information, or receive announcements
about events in your area.

It is 100% free - and please subscribe.

To subscribe send a blank e-mail to:

   [EMAIL PROTECTED]

Please tell your Jewish Single friends about it and help me make it a
success.

I am the moderator.

Thanks,

Moses



=
To unsubscribe, send mail to [EMAIL PROTECTED] with
the word "unsubscribe" in the message body, e.g., run the command
echo unsubscribe | mail [EMAIL PROTECTED]




Re: spaces in filenames

2000-12-26 Thread guy keren

On Wed, 27 Dec 2000, Nadav Har'El wrote:

> On Tue, Dec 26, 2000, Adi Stav wrote about "Re: spaces in filenames":
> > PS1_SIMPLE="\h: \w "
> > PS1="\[\033]0;${PS1_SIMPLE}\007\]${PS1_SIMPLE}"
>
> Maybe because your solution (at first glance - I didn't try it) changes the
> title on every prompt?

while the 'cd' override solution does not work on certain cases. i often
use the 'pushd' and 'popd' command, which also change the current
directory, and do NOT invoke the shell builtin 'cd' function, at least not
under tcsh. so you need to alias 'cd', 'pushd' and 'popd'. any other
commands that change the curernt working directory?

--
guy

"For world domination - press 1,
 or dial 0, and please hold, for the creator." -- nob o. dy


=
To unsubscribe, send mail to [EMAIL PROTECTED] with
the word "unsubscribe" in the message body, e.g., run the command
echo unsubscribe | mail [EMAIL PROTECTED]




KDE problem

2000-12-26 Thread Arieh Bibliowicz

I have a mandrake 7.2 system, and every time I try to install a new KDE
app, it tells me that it can't find de header files, but I'm pretty shure
I installed everything on the dists!!! I am using KDE2, can that be the
rpoblem?


"I'm not trying to break the rules, I'm just testing their elasticity"

Arieh "Vainolo" Bibliowicz - [EMAIL PROTECTED]


=
To unsubscribe, send mail to [EMAIL PROTECTED] with
the word "unsubscribe" in the message body, e.g., run the command
echo unsubscribe | mail [EMAIL PROTECTED]




RE: spoofing DNS..

2000-12-26 Thread Stanislav Malyshev a.k.a Frodo

SB>> Those are I-lines.. not spoofing - hybrid has option to add an
SB>> I-line for spoofing.

I don't know about I-lines, etc. but I know pretty well DNS spoofing via
cache poisoning is possible - have done that myself. If you are
interested, just search "DNS cache poisoning" - there was a lot of
literature on the net on the subject, though I'm not sure that current
DNSes still allow that.

-- 
[EMAIL PROTECTED]  \/  There shall be counsels taken
Stanislav Malyshev  /\  Stronger than Morgul-spells
phone +972-3-9316425/\  JRRT LotR.
http://sharat.co.il/frodo/  whois:!SM8333


=
To unsubscribe, send mail to [EMAIL PROTECTED] with
the word "unsubscribe" in the message body, e.g., run the command
echo unsubscribe | mail [EMAIL PROTECTED]




Re: spaces in filenames

2000-12-26 Thread Nadav Har'El

On Tue, Dec 26, 2000, Adi Stav wrote about "Re: spaces in filenames":
> Speaking of, by the way, I wonder why almost everybody I've seen who
> digs smart xterm titles uses the cd trick instead of something like:
> 
> PS1_SIMPLE="\h: \w "
> PS1="\[\033]0;${PS1_SIMPLE}\007\]${PS1_SIMPLE}"

Maybe because your solution (at first glance - I didn't try it) changes the
title on every prompt? This is a waste of bandwidth (though you won't notice
it unless you have a slow line - e.g., log in to a computer abroad, or
use a slow modem, or worse - a slow X connection). In some window managers it
may also cause the title to flash on every prompt (though if it does, it's a
bug that needs to be corrected in the window manager).

Anyway, your solution isn't bad - it's just that there's a more efficient
solution: to only change the title when it needs changing, i.e., when the
current directory has changed.

By the way, in zsh there's an even more elegant solution (if anybody got
the impression that I'm an avid zsh advocate, they are right): zsh's
standard 'cd' builtin runs a user-define function 'chpwd' after changing
the directory, if such a function exists. So all you need to do is to
add something like the following to your .zshrc (no need for 'cd' functions
or aliases):

chpwd(){
case "$TERM" in
xterm|screen)   print -n '\033]2;'"$LOGNAME@$SYS":$PWD'\007';;
esac
}
chpwd   # run this once in the .zshrc to show the initial current directory



-- 
Nadav Har'El| Wednesday, Dec 27 2000, 1 Tevet 5761
[EMAIL PROTECTED] |-
Phone: +972-53-245868, ICQ 13349191 |I don't live on the edge, but sometimes
http://nadav.harel.org.il   |I go there to visit.

=
To unsubscribe, send mail to [EMAIL PROTECTED] with
the word "unsubscribe" in the message body, e.g., run the command
echo unsubscribe | mail [EMAIL PROTECTED]




RE: spoofing DNS..

2000-12-26 Thread Sagi Bashari

Those are I-lines.. not spoofing -  hybrid has option to add an I-line for
spoofing.

On Tue, 26 Dec 2000, David Hananel wrote:

> If it was easy once, and now not, why do I see lots of people with wierd
> hostnames like : i.am.the.god and stuff like that?
> I saw some at Dal-Net, but most of them are at Ef-Net.
>
> How is that possible?  They said they uses a bnc
>
> David
>
> - Original Message -
> From: Stanislav Malyshev a.k.a Frodo <[EMAIL PROTECTED]>
> To: Tizmo <[EMAIL PROTECTED]>
> Cc: <[EMAIL PROTECTED]>
> Sent: Tuesday, December 26, 2000 10:58 PM
> Subject: Re: spoofing DNS..
>
>
> > T>> lets say i want to connect to an irc server with a spoofed ip, can
> >
> > In most cases, you can't. Most cases of "IP spoofing on IRC" is really DNS
> > spoofing. Real IP spoofing over TCP is pretty hard to do, and if you want
> > to spoof more than one packet (i.e., maintain a real session), you need to
> > be lucky on the edge of miracle to get some success.
> >
> > However, DNS spoofing (i.e., showing wrong name on IRC, which does not
> > correspond to your IP) was pretty easy once (not now). But the packets
> > still would be travelling by your real IP, just nobody on IRC would know
> > it.
> >
> > T>> if i cant tell me how can i send pings with a spoffed ip .. and
> >
> > You can, but you won't get any answer. Why to send pings that you won't
> > get answer?
> > --
> > [EMAIL PROTECTED] \/  There shall be counsels taken
> > Stanislav Malyshev /\  Stronger than Morgul-spells
> > phone +972-3-9316425 /\  JRRT LotR.
> > http://sharat.co.il/frodo/ whois:!SM8333
> >
> >
> > =
> > To unsubscribe, send mail to [EMAIL PROTECTED] with
> > the word "unsubscribe" in the message body, e.g., run the command
> > echo unsubscribe | mail [EMAIL PROTECTED]
> >
>
>
> =
> To unsubscribe, send mail to [EMAIL PROTECTED] with
> the word "unsubscribe" in the message body, e.g., run the command
> echo unsubscribe | mail [EMAIL PROTECTED]
>
>

   _
 ___ __ _ __ _(_)   Sagi Bashari
(_-


RE: spoofing DNS..

2000-12-26 Thread David Hananel

If it was easy once, and now not, why do I see lots of people with wierd
hostnames like : i.am.the.god and stuff like that?
I saw some at Dal-Net, but most of them are at Ef-Net.

How is that possible?  They said they uses a bnc

David

- Original Message -
From: Stanislav Malyshev a.k.a Frodo <[EMAIL PROTECTED]>
To: Tizmo <[EMAIL PROTECTED]>
Cc: <[EMAIL PROTECTED]>
Sent: Tuesday, December 26, 2000 10:58 PM
Subject: Re: spoofing DNS..


> T>> lets say i want to connect to an irc server with a spoofed ip, can
>
> In most cases, you can't. Most cases of "IP spoofing on IRC" is really DNS
> spoofing. Real IP spoofing over TCP is pretty hard to do, and if you want
> to spoof more than one packet (i.e., maintain a real session), you need to
> be lucky on the edge of miracle to get some success.
>
> However, DNS spoofing (i.e., showing wrong name on IRC, which does not
> correspond to your IP) was pretty easy once (not now). But the packets
> still would be travelling by your real IP, just nobody on IRC would know
> it.
>
> T>> if i cant tell me how can i send pings with a spoffed ip .. and
>
> You can, but you won't get any answer. Why to send pings that you won't
> get answer?
> --
> [EMAIL PROTECTED] \/  There shall be counsels taken
> Stanislav Malyshev /\  Stronger than Morgul-spells
> phone +972-3-9316425 /\  JRRT LotR.
> http://sharat.co.il/frodo/ whois:!SM8333
>
>
> =
> To unsubscribe, send mail to [EMAIL PROTECTED] with
> the word "unsubscribe" in the message body, e.g., run the command
> echo unsubscribe | mail [EMAIL PROTECTED]
>


=
To unsubscribe, send mail to [EMAIL PROTECTED] with
the word "unsubscribe" in the message body, e.g., run the command
echo unsubscribe | mail [EMAIL PROTECTED]




Re: spoofing DNS..

2000-12-26 Thread Stanislav Malyshev a.k.a Frodo

T>> lets say i want to connect to an irc server with a spoofed ip, can

In most cases, you can't. Most cases of "IP spoofing on IRC" is really DNS
spoofing. Real IP spoofing over TCP is pretty hard to do, and if you want
to spoof more than one packet (i.e., maintain a real session), you need to
be lucky on the edge of miracle to get some success. 

However, DNS spoofing (i.e., showing wrong name on IRC, which does not
correspond to your IP) was pretty easy once (not now). But the packets
still would be travelling by your real IP, just nobody on IRC would know
it.

T>> if i cant tell me how can i send pings with a spoffed ip .. and

You can, but you won't get any answer. Why to send pings that you won't
get answer?
-- 
[EMAIL PROTECTED]  \/  There shall be counsels taken
Stanislav Malyshev  /\  Stronger than Morgul-spells
phone +972-3-9316425/\  JRRT LotR.
http://sharat.co.il/frodo/  whois:!SM8333


=
To unsubscribe, send mail to [EMAIL PROTECTED] with
the word "unsubscribe" in the message body, e.g., run the command
echo unsubscribe | mail [EMAIL PROTECTED]




Re: hebrew_kbd.tar.gz

2000-12-26 Thread Tzafrir Cohen

I'm not Matan, but ...

On Tue, 26 Dec 2000, Miriam wrote:

> I am trying to install and use your keyboards, starting with the
> console environement. I have three questions relating to it.

Note that there have been some updates here. See below.

> 1 The installation was very easy, but in the package I found
> no indication on the way to use it. You probably describedthat somewhere
> else, but I was not able to find it. Can you give me some pointer ?

IIRC the README in that package explained exactly what you have to do,
but...

http://linux.org.il/faq -> hebrew

In your rc.local, or anything else that is executed at logon time, run:

# set console fonts on TTYs 1 to 6:
for tty in /dev/tty[1-6]; do
  consoechars -f iso08.f16 -m iso08 --tty=${tty}
done

note: this isn't a script that works on my computer, but something I
composed now, so please test it...

mandrake already sets the console font on startup. You basically have to
set the correct values on /etc/sysconfig/i18n :

# console fonts stuff
# font to use
SYSFONT=iso08.f16
# unicode map file (I'm not sure about that one: I don't use unicode font
# at the console. tzafrir)
UNIMAP=iso08
# font-to-encoding translation file
SYSFONTACM=iso08

What about fonts with line-drawing chars? I can't find the one I had for
f16. And I still haven't recieved tthe ones for the two other sizes somene
long ago promised to rip off his display adapter.

> 2 I do not understand the way the command:
> echo -n -e "\\033(K" >$tty in /etc/rc.d/rc.local.heb works. I found out
> that it changes the assignment of the chars for values >127 (and I had a
> hard time to restore the old assignment). I tried to look up my books on
> Unix, but the subject was not covered. Again, can you recommend some text
> or some relevant electronic publication ?

Is that correct? Such things are better handled by the locale (set LANG,
or at least LC_CTYPE, to "he").

Also note that recent distros should carry a correct hebrew console
keymap.

Also note that the keymap for X may not be perfect (you may have problems
with numbers while in the Hebrew layout), although it should do the job.

If this bthers you, you can get the up-to-date symbols file linked from
the FAQ.

> 3 I read in an (old) Technion document that vim -H is not
> suited for texts that mixt Hebrew and English on the same line. Rightly or
> wrongly I got the impression that vim -H is one of the aplications
> considered by you. If this is true then you will probably be able to tell
> if this is still true.
>   Thanks a lot, Avraham

That depends...

vim has some support of right-to-left hebrew in a very straight-forward
manner: it simply reverses the whole disply...

If you have no better alternative, then go for it. There is currently no
decent text editor with decent hebrwe support (although hebgtk'ed gedit
works quite well. But it is not as good a text editor as vim).

I use it extensivly. The FAQ has some macros to make your life a bit
eqasier.

Regards

-- 
Tzafrir Cohen
mailto:[EMAIL PROTECTED]
http://www.technion.ac.il/~tzafrir


=
To unsubscribe, send mail to [EMAIL PROTECTED] with
the word "unsubscribe" in the message body, e.g., run the command
echo unsubscribe | mail [EMAIL PROTECTED]




Re: ipchains

2000-12-26 Thread Stanislav Malyshev a.k.a Frodo

AO>> Even if the CEO does. Seen any company that the users don't hold mp3s
AO>> on their computers? It's illegal in the US and most startups are
AO>> registered in the US.

MP3 format is illegal in US? News for me. Is WAV going to be banned too?

-- 
[EMAIL PROTECTED]  \/  There shall be counsels taken
Stanislav Malyshev  /\  Stronger than Morgul-spells
phone +972-3-9316425/\  JRRT LotR.
http://sharat.co.il/frodo/  whois:!SM8333


=
To unsubscribe, send mail to [EMAIL PROTECTED] with
the word "unsubscribe" in the message body, e.g., run the command
echo unsubscribe | mail [EMAIL PROTECTED]




Re: ipchains

2000-12-26 Thread Stanislav Malyshev a.k.a Frodo

AO>> 1. the computer on 192.168.1.78(example) is up

Nice. Most computers tend to be up when people are working.

AO>> 2. It can receive connection to the ICQ port

Wrong. Firewall won't let incoming connection in. It would only allow to
receive UDP packets inside "virtual circuit" created by outgoing
connection.

AO>> 3. the NAT gateway/fw allows "related" packets to pass from icq to
AO>>192.168.1.78

Yes, so you can talk to gateway's forwarding port and to ICQ via it. So
what?

AO>> 4. icq packets are classified as "related".
AO>> 
AO>> Now any man-in-the-middle attack becomes very easy.
AO>> You spoof your address (using known flaws in DNS)
AO>> and easily get into the inner network.

Here you lost me. All you can do is to send packets to firewall's
firwarding port, where they will be forwarded to ICQ's port on intranet
computer, which will or process them, if they are valid UDP packets coming
from the right source, or drop them. With skill, you can disrupt some ICQ
session, but no more. Don't see "easily getting into inner network" here. 

BTW: this has nothing to do with DNS. No sane sysadmin bases firewall
rules on DNS. Most firewalls won't even allow you to do this. 
-- 
[EMAIL PROTECTED]  \/  There shall be counsels taken
Stanislav Malyshev  /\  Stronger than Morgul-spells
phone +972-3-9316425/\  JRRT LotR.
http://sharat.co.il/frodo/  whois:!SM8333


=
To unsubscribe, send mail to [EMAIL PROTECTED] with
the word "unsubscribe" in the message body, e.g., run the command
echo unsubscribe | mail [EMAIL PROTECTED]




Re: Nonstop ADSL

2000-12-26 Thread Dani Arbel

Hi!
Can you connect to them with a windows client? if so, can you record the
session with a sniffer (say, ethereal) and then sniff again your failed
Linux session ?
Dani

On Tue, 26 Dec 2000 [EMAIL PROTECTED] wrote:

> Has anyone using ADSL in Linux tried to connect as a user (not as
> guest@ONonstop) ?
> 
> They offered me two months free (now that the Bezeq experiment is over), but of
> course they had no idea how to connect with Linux. I thought it would be easy -
> just add the appopriate line with the user name and password they gave me to
> the pap-secrets file and connect with the new name instead of guest - but it
> didn't work. Does anyone have any ideas?
> 
> TIA
> 
> //-
> Shlomo Solomon
> E-Mail: [EMAIL PROTECTED]
> http://come.to/shlomo.solomon
> Date: 26-Dec-2000   Time: 21:45:27
> 
> Message sent by XFMail on a LINUX Mandrake 7.2 machine
> //-
> 
> =
> To unsubscribe, send mail to [EMAIL PROTECTED] with
> the word "unsubscribe" in the message body, e.g., run the command
> echo unsubscribe | mail [EMAIL PROTECTED]
> 
> 


=
To unsubscribe, send mail to [EMAIL PROTECTED] with
the word "unsubscribe" in the message body, e.g., run the command
echo unsubscribe | mail [EMAIL PROTECTED]




hebrew_kbd.tar.gz

2000-12-26 Thread Miriam

I am trying to install and use your keyboards, starting with the
console environement. I have three questions relating to it.
1   The installation was very easy, but in the package I found
no indication on the way to use it. You probably described that somewhere
else, but I was not able to find it. Can you give me some pointer ?
2   I do not understand the way the command:
echo -n -e "\\033(K" >$tty in /etc/rc.d/rc.local.heb works. I found out
that it changes the assignment of the chars for values >127 (and I had a
hard time to restore the old assignment). I tried to look up my books on
Unix, but the subject was not covered. Again, can you recommend some text
or some relevant electronic publication ?
3   I read in an (old) Technion document that vim -H is not
suited for texts that mixt Hebrew and English on the same line. Rightly or
wrongly I got the impression that vim -H is one of the aplications
considered by you. If this is true then you will probably be able to tell
if this is still true.
Thanks a lot, Avraham





=
To unsubscribe, send mail to [EMAIL PROTECTED] with
the word "unsubscribe" in the message body, e.g., run the command
echo unsubscribe | mail [EMAIL PROTECTED]




Re: Linux Installation on mini-laptops

2000-12-26 Thread Manor G.

Yes i did it allready and it was easier than i thought.
thanks anyway.

On Tue, 26 Dec 2000,
Gilad Ben-Yossef wrote: > Manor G. wrote: > 
> > anyone has any sort of experience with installing linux
> > on a mini-laptop that has a PCMCIA 1.44 floopy disk 
> > and an external PCMCIA Cd-rom 
> > [Toshiba Libretto 70ct]
> > 
> 
> 
> I have installed without a problem RH6.x on a NEC mobio, which is the 
> twin of the Libretto, in the configuration you mentioned.
> 
> Gilad.
> 
> 
> 
> -- 
> Gilad Ben-Yossef <[EMAIL PROTECTED]>
> http://benyossef.com :: +972(54)756701
> "Anything that can go wrong, will go wrong, while interrupts are disabled. "
>   -- Murphey's law of kernel programing.
> 
> 
> =
> To unsubscribe, send mail to [EMAIL PROTECTED] with
> the word "unsubscribe" in the message body, e.g., run the command
> echo unsubscribe | mail [EMAIL PROTECTED]

=
To unsubscribe, send mail to [EMAIL PROTECTED] with
the word "unsubscribe" in the message body, e.g., run the command
echo unsubscribe | mail [EMAIL PROTECTED]




Nonstop ADSL

2000-12-26 Thread solomon

Has anyone using ADSL in Linux tried to connect as a user (not as
guest@ONonstop) ?

They offered me two months free (now that the Bezeq experiment is over), but of
course they had no idea how to connect with Linux. I thought it would be easy -
just add the appopriate line with the user name and password they gave me to
the pap-secrets file and connect with the new name instead of guest - but it
didn't work. Does anyone have any ideas?

TIA

//-
Shlomo Solomon
E-Mail: [EMAIL PROTECTED]
http://come.to/shlomo.solomon
Date: 26-Dec-2000   Time: 21:45:27

Message sent by XFMail on a LINUX Mandrake 7.2 machine
//-

=
To unsubscribe, send mail to [EMAIL PROTECTED] with
the word "unsubscribe" in the message body, e.g., run the command
echo unsubscribe | mail [EMAIL PROTECTED]




Re: spaces in filenames

2000-12-26 Thread Adi Stav

On Tue, Dec 26, 2000 at 08:15:39PM +0200, Oleg Goldshmidt wrote:
> Brilliant! Stupid me! I had
> 
> # let the xterm titlebar show the current dir
> xtitle() {
> if [ "$TERM" = "xterm" ]; then
> echo -n -e "\033]0;$@\007" >/dev/tty
> fi
> }
> 
> # Change the 'cd' 'pushd' 'popd' commands to use xtitle()
> cd() {
> builtin cd "$@"
> xtitle ${HOSTNAME%%.*}: $PWD
> }
> 
> in .bashrc! Thanks!

Ahh... I once got bitten by such, and since then I always surround my
arguments with double quotes in scripts. I find it just as easy to
type and to read as the braces people usually put in.

Speaking of, by the way, I wonder why almost everybody I've seen who
digs smart xterm titles uses the cd trick instead of something like:

PS1_SIMPLE="\h: \w "
PS1="\[\033]0;${PS1_SIMPLE}\007\]${PS1_SIMPLE}"

=
To unsubscribe, send mail to [EMAIL PROTECTED] with
the word "unsubscribe" in the message body, e.g., run the command
echo unsubscribe | mail [EMAIL PROTECTED]




Re: spoofing DNS..

2000-12-26 Thread Sagi Bashari

Yea.. sorry, I ment DNS spoofing.

however, you still can't spoof on most of the irc servers today.

On Tue, 26 Dec 2000, Aviram Jenik wrote:

> IP Spoofing is not DNS spoofing. Actually, there's very little in common
> between the two attacks.
>
> In DNS Spoofing, you want people who type www.amazon.com to reach your web
> site (www.geocities.com/someplace/attacker.html). This way, you can build a
> web page that looks like Amazon and make people send you their credit cards
> thinking they just bought a Christmas present.
>
> IP spoofing means faking another person's IP address, usually for one of two
> reasons: Do something the other person can (for example: bypassing TCP
> Wrappers by entering an IP address that is allowed to telnet in) or to
> 'frame' someone by making a third party think the victim was the one who
> performed an attack (or in the example below, to curse someone on IRC and
> make everybody think it was someone else).
>
> How do we do IP spoofing:
> Like someone mentioned before, hping can be used to create arbitrary
> packets, which are good for the second attack (framing somone):
> http://www.securiteam.com/tools/HPing__a_network_analysis_tool.html
>
> This will not work, however, for TCP/IP sessions (like IRC). Unlike UDP, TCP
> requires you to maintain a complete session, which means for example that
> you need to acknowledge every packet you receive. Since you don't actually
> *receive* the packet (someone else does: The person whose IP you faked) you
> don't know the packet's sequence numbering and thus you can't acknowledge
> it. Things start to complicate here, as some OSes have weak sequence
> numbering and thus these numbers can be guesses (or rather 'brute forced')
> but I'll ignore this for now.
> To play a bit with TCP/IP spoofing and hijacking (the lovely attack where
> you take a live TCP/IP session between the victim and a remote server and
> continue it for them - for example, hijack a telnet session after the user
> has logged in), try hunt or juggernaut:
> http://www.securiteam.com/tools/Hunt__a_new_Hijacking_software.html
> http://www.securiteam.com/tools/Juggernaut__a_session_hijacking_tool.html
>
> Try to run it on a victim on your local network (if your network is not
> switch based but rather hub based) and you'll have a lot of fun. Note that
> you need to be able to 'sniff' the responses in order for the hijacking to
> work.
>
> nmap (www.insecure.org/nmap) has a nice port scanning mode where you give IP
> addresses of 'decoys' and nmap spoofs port scans from them. This can be used
> to 'frame' someone you hate, but also makes it very difficult for the system
> administrator to know who really scanned him (imagine being scanned by 100+
> machines: Now you have to find out which one of them is the one who actually
> scanned you).
>
>
> How to do DNS Spoofing:
>
> The most common way is 'cache poisoning'. I won't write the whole
> explanation of it, since it's available in the link below:
> http://www.securiteam.com/windowsntfocus/DNS_Spoofing_and_Windows_NT_DNS.htm
> l
> (NOTE: URL might be wrapped)
>
> The explanation is about Windows NT DNS, but it is mostly true for Linux as
> well.
>
>
> - Aviram
>
>
> - Original Message -
> From: "Sagi Bashari" <[EMAIL PROTECTED]>
> To: "Tizmo" <[EMAIL PROTECTED]>
> Cc: <[EMAIL PROTECTED]>
> Sent: Tuesday, December 26, 2000 7:53 PM
> Subject: Re: spoofing DNS..
>
>
> > Tizmo,
> >
> > You cannot spoof your IP on IRC today. IRC works on TCP, not spoofable.
> > there used to be a way to spoof by exploiting some hole in old versions
> > of bind, but 99% of the DNS Servers today are patched.
> >
> > .. just leave it.
> >
> > On Tue, 26 Dec 2000, Tizmo wrote:
> >
> > > lets say i want to connect to an irc server with a spoofed ip, can i do
> it ?
> > > or i want to surf the web not with my real ip..
> > > if i and if i cant tell me how can i send pings with a spoffed ip .. and
> > > what is hping2 ?
> > >
> > > - Original Message -
> > > From: <[EMAIL PROTECTED]>
> > > To: "'Tizmo'" <[EMAIL PROTECTED]>; <[EMAIL PROTECTED]>
> > > Sent: Tuesday, December 26, 2000 6:35 PM
> > > Subject: RE: spoofing DNS..
> > >
> > >
> > > >
> > > > depends what you want to do with it...
> > > > don't forget that sending packets from a spoofed ip, will result in no
> > > > replies...
> > > > if you want to do a spoof icmp or udp attacks you can use hping2 for
> > > > instance...
> > > > question still stands, what are you trying to accomplish?
> > > >
> > > > -Original Message-
> > > > From: [EMAIL PROTECTED]
> > > > [mailto:[EMAIL PROTECTED]]On Behalf Of Tizmo
> > > > Sent: Tuesday, December 26, 2000 6:24 PM
> > > > To: [EMAIL PROTECTED]
> > > > Subject: Re: spoofing DNS..
> > > >
> > > >
> > > > i mean spoffing my ip
> > > > - Original Message -
> > > > From: "Eddie Harari" <[EMAIL PROTECTED]>
> > > > To: "'Tizmo'" <[EMAIL PROTECTED]>; <[EMAIL PROTECTED]>
> > > > Sent: Tuesday, December 26, 2000 2:24 PM
> > > > Subj

Re: spoofing DNS..

2000-12-26 Thread Aviram Jenik

IP Spoofing is not DNS spoofing. Actually, there's very little in common
between the two attacks.

In DNS Spoofing, you want people who type www.amazon.com to reach your web
site (www.geocities.com/someplace/attacker.html). This way, you can build a
web page that looks like Amazon and make people send you their credit cards
thinking they just bought a Christmas present.

IP spoofing means faking another person's IP address, usually for one of two
reasons: Do something the other person can (for example: bypassing TCP
Wrappers by entering an IP address that is allowed to telnet in) or to
'frame' someone by making a third party think the victim was the one who
performed an attack (or in the example below, to curse someone on IRC and
make everybody think it was someone else).

How do we do IP spoofing:
Like someone mentioned before, hping can be used to create arbitrary
packets, which are good for the second attack (framing somone):
http://www.securiteam.com/tools/HPing__a_network_analysis_tool.html

This will not work, however, for TCP/IP sessions (like IRC). Unlike UDP, TCP
requires you to maintain a complete session, which means for example that
you need to acknowledge every packet you receive. Since you don't actually
*receive* the packet (someone else does: The person whose IP you faked) you
don't know the packet's sequence numbering and thus you can't acknowledge
it. Things start to complicate here, as some OSes have weak sequence
numbering and thus these numbers can be guesses (or rather 'brute forced')
but I'll ignore this for now.
To play a bit with TCP/IP spoofing and hijacking (the lovely attack where
you take a live TCP/IP session between the victim and a remote server and
continue it for them - for example, hijack a telnet session after the user
has logged in), try hunt or juggernaut:
http://www.securiteam.com/tools/Hunt__a_new_Hijacking_software.html
http://www.securiteam.com/tools/Juggernaut__a_session_hijacking_tool.html

Try to run it on a victim on your local network (if your network is not
switch based but rather hub based) and you'll have a lot of fun. Note that
you need to be able to 'sniff' the responses in order for the hijacking to
work.

nmap (www.insecure.org/nmap) has a nice port scanning mode where you give IP
addresses of 'decoys' and nmap spoofs port scans from them. This can be used
to 'frame' someone you hate, but also makes it very difficult for the system
administrator to know who really scanned him (imagine being scanned by 100+
machines: Now you have to find out which one of them is the one who actually
scanned you).


How to do DNS Spoofing:

The most common way is 'cache poisoning'. I won't write the whole
explanation of it, since it's available in the link below:
http://www.securiteam.com/windowsntfocus/DNS_Spoofing_and_Windows_NT_DNS.htm
l
(NOTE: URL might be wrapped)

The explanation is about Windows NT DNS, but it is mostly true for Linux as
well.


- Aviram


- Original Message -
From: "Sagi Bashari" <[EMAIL PROTECTED]>
To: "Tizmo" <[EMAIL PROTECTED]>
Cc: <[EMAIL PROTECTED]>
Sent: Tuesday, December 26, 2000 7:53 PM
Subject: Re: spoofing DNS..


> Tizmo,
>
> You cannot spoof your IP on IRC today. IRC works on TCP, not spoofable.
> there used to be a way to spoof by exploiting some hole in old versions
> of bind, but 99% of the DNS Servers today are patched.
>
> .. just leave it.
>
> On Tue, 26 Dec 2000, Tizmo wrote:
>
> > lets say i want to connect to an irc server with a spoofed ip, can i do
it ?
> > or i want to surf the web not with my real ip..
> > if i and if i cant tell me how can i send pings with a spoffed ip .. and
> > what is hping2 ?
> >
> > - Original Message -
> > From: <[EMAIL PROTECTED]>
> > To: "'Tizmo'" <[EMAIL PROTECTED]>; <[EMAIL PROTECTED]>
> > Sent: Tuesday, December 26, 2000 6:35 PM
> > Subject: RE: spoofing DNS..
> >
> >
> > >
> > > depends what you want to do with it...
> > > don't forget that sending packets from a spoofed ip, will result in no
> > > replies...
> > > if you want to do a spoof icmp or udp attacks you can use hping2 for
> > > instance...
> > > question still stands, what are you trying to accomplish?
> > >
> > > -Original Message-
> > > From: [EMAIL PROTECTED]
> > > [mailto:[EMAIL PROTECTED]]On Behalf Of Tizmo
> > > Sent: Tuesday, December 26, 2000 6:24 PM
> > > To: [EMAIL PROTECTED]
> > > Subject: Re: spoofing DNS..
> > >
> > >
> > > i mean spoffing my ip
> > > - Original Message -
> > > From: "Eddie Harari" <[EMAIL PROTECTED]>
> > > To: "'Tizmo'" <[EMAIL PROTECTED]>; <[EMAIL PROTECTED]>
> > > Sent: Tuesday, December 26, 2000 2:24 PM
> > > Subject: RE: spoofing DNS..
> > >
> > >
> > > > what exactly do you mean by spoofing DNS ,
> > > >
> > > >  reply to requests that came to your dns server with fault data ???
> > > >  or spoof your IP ?
> > > >
> > > > -Original Message-
> > > > From: Tizmo [mailto:[EMAIL PROTECTED]]
> > > > Sent: Tuesday, December 26, 2000 12:24 PM
> > > > To: [EMAIL P

Re: spaces in filenames

2000-12-26 Thread Oleg Goldshmidt

"Nadav Har'El" <[EMAIL PROTECTED]> writes:

> Do you have a 'cd' function in your .bashrc? ;)
> 
> It appears that in your own account (but not root), you have a cd function
> (e.g., that shows the current directory on a window's title), which perhaps
> uses $* and distroys the shell's space handling. If this is indeed the case,
> try to replace $* by "$@" (the quotes are important), and see if it fixes the
> problem.

Brilliant! Stupid me! I had

# let the xterm titlebar show the current dir
xtitle() {
if [ "$TERM" = "xterm" ]; then
echo -n -e "\033]0;$@\007" >/dev/tty
fi
}

# Change the 'cd' 'pushd' 'popd' commands to use xtitle()
cd() {
builtin cd "$@"
xtitle ${HOSTNAME%%.*}: $PWD
}

in .bashrc! Thanks!

> P.S. how do you see the list of functions defined in bash? In zsh you have
> the 'functions' builtin. Is there a similar builtin in bash?

In a manner similar to ksh. From "man bash":

Function names and definitions may be listed with  the  -f
option to the declare or typeset builtin commands.  The -F
option to declare or typeset will list the function  names
only. 

-- 
Oleg Goldshmidt | Comgates Ltd. | [EMAIL PROTECTED] 
"... We work by wit, and not by witchcraft;
 And wit depends on dilatory time." [Shakespeare]

=
To unsubscribe, send mail to [EMAIL PROTECTED] with
the word "unsubscribe" in the message body, e.g., run the command
echo unsubscribe | mail [EMAIL PROTECTED]




Re: spoofing DNS..

2000-12-26 Thread Sagi Bashari

Tizmo,

You cannot spoof your IP on IRC today. IRC works on TCP, not spoofable.
there used to be a way to spoof by exploiting some hole in old versions
of bind, but 99% of the DNS Servers today are patched.

.. just leave it.

On Tue, 26 Dec 2000, Tizmo wrote:

> lets say i want to connect to an irc server with a spoofed ip, can i do it ?
> or i want to surf the web not with my real ip..
> if i and if i cant tell me how can i send pings with a spoffed ip .. and
> what is hping2 ?
>
> - Original Message -
> From: <[EMAIL PROTECTED]>
> To: "'Tizmo'" <[EMAIL PROTECTED]>; <[EMAIL PROTECTED]>
> Sent: Tuesday, December 26, 2000 6:35 PM
> Subject: RE: spoofing DNS..
>
>
> >
> > depends what you want to do with it...
> > don't forget that sending packets from a spoofed ip, will result in no
> > replies...
> > if you want to do a spoof icmp or udp attacks you can use hping2 for
> > instance...
> > question still stands, what are you trying to accomplish?
> >
> > -Original Message-
> > From: [EMAIL PROTECTED]
> > [mailto:[EMAIL PROTECTED]]On Behalf Of Tizmo
> > Sent: Tuesday, December 26, 2000 6:24 PM
> > To: [EMAIL PROTECTED]
> > Subject: Re: spoofing DNS..
> >
> >
> > i mean spoffing my ip
> > - Original Message -
> > From: "Eddie Harari" <[EMAIL PROTECTED]>
> > To: "'Tizmo'" <[EMAIL PROTECTED]>; <[EMAIL PROTECTED]>
> > Sent: Tuesday, December 26, 2000 2:24 PM
> > Subject: RE: spoofing DNS..
> >
> >
> > > what exactly do you mean by spoofing DNS ,
> > >
> > >  reply to requests that came to your dns server with fault data ???
> > >  or spoof your IP ?
> > >
> > > -Original Message-
> > > From: Tizmo [mailto:[EMAIL PROTECTED]]
> > > Sent: Tuesday, December 26, 2000 12:24 PM
> > > To: [EMAIL PROTECTED]
> > > Subject: spoofing DNS..
> > >
> > >
> > > hey list,
> > > i heard about spoffing dns in linux .. like, changing your ip address to
> > > what ever you like it to be.
> > > i just wanted to know if it's true and if it is i really would like to
> > know
> > > how it's can be done.
> > > thanks.
> > >
> > >
> > > =
> > > To unsubscribe, send mail to [EMAIL PROTECTED] with
> > > the word "unsubscribe" in the message body, e.g., run the command
> > > echo unsubscribe | mail [EMAIL PROTECTED]
> > >
> > > =
> > > To unsubscribe, send mail to [EMAIL PROTECTED] with
> > > the word "unsubscribe" in the message body, e.g., run the command
> > > echo unsubscribe | mail [EMAIL PROTECTED]
> > >
> > >
> >
> >
> > =
> > To unsubscribe, send mail to [EMAIL PROTECTED] with
> > the word "unsubscribe" in the message body, e.g., run the command
> > echo unsubscribe | mail [EMAIL PROTECTED]
> >
> >
> >
> > =
> > To unsubscribe, send mail to [EMAIL PROTECTED] with
> > the word "unsubscribe" in the message body, e.g., run the command
> > echo unsubscribe | mail [EMAIL PROTECTED]
> >
> >
>
>
> =
> To unsubscribe, send mail to [EMAIL PROTECTED] with
> the word "unsubscribe" in the message body, e.g., run the command
> echo unsubscribe | mail [EMAIL PROTECTED]
>
>

   _
 ___ __ _ __ _(_)   Sagi Bashari
(_-


Re: spoofing DNS..

2000-12-26 Thread Tizmo

lets say i want to connect to an irc server with a spoofed ip, can i do it ?
or i want to surf the web not with my real ip..
if i and if i cant tell me how can i send pings with a spoffed ip .. and
what is hping2 ?

- Original Message -
From: <[EMAIL PROTECTED]>
To: "'Tizmo'" <[EMAIL PROTECTED]>; <[EMAIL PROTECTED]>
Sent: Tuesday, December 26, 2000 6:35 PM
Subject: RE: spoofing DNS..


>
> depends what you want to do with it...
> don't forget that sending packets from a spoofed ip, will result in no
> replies...
> if you want to do a spoof icmp or udp attacks you can use hping2 for
> instance...
> question still stands, what are you trying to accomplish?
>
> -Original Message-
> From: [EMAIL PROTECTED]
> [mailto:[EMAIL PROTECTED]]On Behalf Of Tizmo
> Sent: Tuesday, December 26, 2000 6:24 PM
> To: [EMAIL PROTECTED]
> Subject: Re: spoofing DNS..
>
>
> i mean spoffing my ip
> - Original Message -
> From: "Eddie Harari" <[EMAIL PROTECTED]>
> To: "'Tizmo'" <[EMAIL PROTECTED]>; <[EMAIL PROTECTED]>
> Sent: Tuesday, December 26, 2000 2:24 PM
> Subject: RE: spoofing DNS..
>
>
> > what exactly do you mean by spoofing DNS ,
> >
> >  reply to requests that came to your dns server with fault data ???
> >  or spoof your IP ?
> >
> > -Original Message-
> > From: Tizmo [mailto:[EMAIL PROTECTED]]
> > Sent: Tuesday, December 26, 2000 12:24 PM
> > To: [EMAIL PROTECTED]
> > Subject: spoofing DNS..
> >
> >
> > hey list,
> > i heard about spoffing dns in linux .. like, changing your ip address to
> > what ever you like it to be.
> > i just wanted to know if it's true and if it is i really would like to
> know
> > how it's can be done.
> > thanks.
> >
> >
> > =
> > To unsubscribe, send mail to [EMAIL PROTECTED] with
> > the word "unsubscribe" in the message body, e.g., run the command
> > echo unsubscribe | mail [EMAIL PROTECTED]
> >
> > =
> > To unsubscribe, send mail to [EMAIL PROTECTED] with
> > the word "unsubscribe" in the message body, e.g., run the command
> > echo unsubscribe | mail [EMAIL PROTECTED]
> >
> >
>
>
> =
> To unsubscribe, send mail to [EMAIL PROTECTED] with
> the word "unsubscribe" in the message body, e.g., run the command
> echo unsubscribe | mail [EMAIL PROTECTED]
>
>
>
> =
> To unsubscribe, send mail to [EMAIL PROTECTED] with
> the word "unsubscribe" in the message body, e.g., run the command
> echo unsubscribe | mail [EMAIL PROTECTED]
>
>


=
To unsubscribe, send mail to [EMAIL PROTECTED] with
the word "unsubscribe" in the message body, e.g., run the command
echo unsubscribe | mail [EMAIL PROTECTED]




Re: PostgreSQL & Hebrew Charset

2000-12-26 Thread Jean-Daniel PAUGET

On Mon, 25 Dec 2000, Ben-Nes Michael wrote:

> Hi
> 
> does any one know if postgresl (7) support hebrew charset ? (sorting,
> group ... )
> If so, what is the way to enable it ?

there is a "locale"-ized extension for postgres. I don't know how the
right-left dilemna is handled though for, say, a field that would have
a content of mixed hebrew/latin chars...
another problem, as far as I understood, is that mixing different localised
databases seem not possible without splitting in as many processes/IP
port as different "locale" in use.

though I decided not even to test, but if someone can infirmate those
though, I'd rather be happy !

-- 
   (°-  --il n'y a pas d'helice, helas !)\._.,--,'``. 
   //\  et oui ! c'est la qu'est l'os !--  /,   _.. \   _\  ;`._ ,.
   v_/_(the big vadrouille, 1944) `._.-(,_..'--(,_..'`-.;.'


ÝØ unsubscribe, send mail to [EMAIL PROTECTED] with
the word "unsubscribe" in the message body, e.g., run the command
echo unsubscribe | mail [EMAIL PROTECTED]




Re: spaces in filenames

2000-12-26 Thread Nadav Har'El

On Tue, Dec 26, 2000, Oleg Goldshmidt wrote about "spaces in filenames":
> 
> Hi, I see the following weird phenomenon: bash cannot recognize
> filenames or directories that have spaces, unless I am root/su. This
> is a typical example:
> 
> $ mkdir "Foo Bar"
> $ cd Foo\ Bar/
> bash: cd: Foo: No such file or directory
> $ su
> Password: 
> # cd Foo\ Bar/
> /home/oleg/tmp/Foo Bar

Do you have a 'cd' function in your .bashrc? ;)

It appears that in your own account (but not root), you have a cd function
(e.g., that shows the current directory on a window's title), which perhaps
uses $* and distroys the shell's space handling. If this is indeed the case,
try to replace $* by "$@" (the quotes are important), and see if it fixes the
problem.

P.S. how do you see the list of functions defined in bash? In zsh you have
the 'functions' builtin. Is there a similar builtin in bash?

-- 
Nadav Har'El|   Tuesday, Dec 26 2000, 1 Tevet 5761
[EMAIL PROTECTED] |-
Phone: +972-53-245868, ICQ 13349191 |What did the Buddhist say to the hot dog
http://nadav.harel.org.il   |vendor? Make me one with everything.

=
To unsubscribe, send mail to [EMAIL PROTECTED] with
the word "unsubscribe" in the message body, e.g., run the command
echo unsubscribe | mail [EMAIL PROTECTED]




Re: ipchains

2000-12-26 Thread Alon Oz

Moshe Zadka wrote:
> 
> On Tue, 26 Dec 2000, Alon Oz <[EMAIL PROTECTED]> wrote:
> 
> > 1 problem though, by using firewall piercing techniques you probably
> > violate your contract with the company.
> 
> And what part of "I'm an advocate of company policy/polite request rather
> then technical solutions" did I fail to make clear?

As someone who was a sysadmin for a while, I can tell you that users
usually won't stop using ICQ/any other program if you "ask them nicely".
Even if the CEO does. Seen any company that the users don't hold mp3s
on their computers? It's illegal in the US and most startups are
registered in the US.
So you can see why the technical solution _plus_ a request(read:
notification)
is a better solution.


-- 
Alon Oz,
Aduva Research Team,
Mailto: [EMAIL PROTECTED]

--
A proud member in the Evil Linux cyberterrorist hackers (ELCH) 
organization
A who can launch Denial of Service attacks against the embedded devices
in your 6-slice toaster with advanced pingflood Open Source classified
exploit codes hidden inside strongly encrypted Russian mafia pornography
that innocent American children download from online gambling web sites 
located in the Northern Mariana Islands

=
To unsubscribe, send mail to [EMAIL PROTECTED] with
the word "unsubscribe" in the message body, e.g., run the command
echo unsubscribe | mail [EMAIL PROTECTED]




RE: spoofing DNS..

2000-12-26 Thread ishaybas


depends what you want to do with it...
don't forget that sending packets from a spoofed ip, will result in no
replies...
if you want to do a spoof icmp or udp attacks you can use hping2 for
instance...
question still stands, what are you trying to accomplish?

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]]On Behalf Of Tizmo
Sent: Tuesday, December 26, 2000 6:24 PM
To: [EMAIL PROTECTED]
Subject: Re: spoofing DNS..


i mean spoffing my ip
- Original Message -
From: "Eddie Harari" <[EMAIL PROTECTED]>
To: "'Tizmo'" <[EMAIL PROTECTED]>; <[EMAIL PROTECTED]>
Sent: Tuesday, December 26, 2000 2:24 PM
Subject: RE: spoofing DNS..


> what exactly do you mean by spoofing DNS ,
>
>  reply to requests that came to your dns server with fault data ???
>  or spoof your IP ?
>
> -Original Message-
> From: Tizmo [mailto:[EMAIL PROTECTED]]
> Sent: Tuesday, December 26, 2000 12:24 PM
> To: [EMAIL PROTECTED]
> Subject: spoofing DNS..
>
>
> hey list,
> i heard about spoffing dns in linux .. like, changing your ip address to
> what ever you like it to be.
> i just wanted to know if it's true and if it is i really would like to
know
> how it's can be done.
> thanks.
>
>
> =
> To unsubscribe, send mail to [EMAIL PROTECTED] with
> the word "unsubscribe" in the message body, e.g., run the command
> echo unsubscribe | mail [EMAIL PROTECTED]
>
> =
> To unsubscribe, send mail to [EMAIL PROTECTED] with
> the word "unsubscribe" in the message body, e.g., run the command
> echo unsubscribe | mail [EMAIL PROTECTED]
>
>


=
To unsubscribe, send mail to [EMAIL PROTECTED] with
the word "unsubscribe" in the message body, e.g., run the command
echo unsubscribe | mail [EMAIL PROTECTED]



=
To unsubscribe, send mail to [EMAIL PROTECTED] with
the word "unsubscribe" in the message body, e.g., run the command
echo unsubscribe | mail [EMAIL PROTECTED]




Re: ipchains

2000-12-26 Thread Moshe Zadka

On Tue, 26 Dec 2000, Alon Oz <[EMAIL PROTECTED]> wrote:

> 1 problem though, by using firewall piercing techniques you probably
> violate your contract with the company.

And what part of "I'm an advocate of company policy/polite request rather
then technical solutions" did I fail to make clear?

=
To unsubscribe, send mail to [EMAIL PROTECTED] with
the word "unsubscribe" in the message body, e.g., run the command
echo unsubscribe | mail [EMAIL PROTECTED]




Re: spoofing DNS..

2000-12-26 Thread Tizmo

i mean spoffing my ip
- Original Message -
From: "Eddie Harari" <[EMAIL PROTECTED]>
To: "'Tizmo'" <[EMAIL PROTECTED]>; <[EMAIL PROTECTED]>
Sent: Tuesday, December 26, 2000 2:24 PM
Subject: RE: spoofing DNS..


> what exactly do you mean by spoofing DNS ,
>
>  reply to requests that came to your dns server with fault data ???
>  or spoof your IP ?
>
> -Original Message-
> From: Tizmo [mailto:[EMAIL PROTECTED]]
> Sent: Tuesday, December 26, 2000 12:24 PM
> To: [EMAIL PROTECTED]
> Subject: spoofing DNS..
>
>
> hey list,
> i heard about spoffing dns in linux .. like, changing your ip address to
> what ever you like it to be.
> i just wanted to know if it's true and if it is i really would like to
know
> how it's can be done.
> thanks.
>
>
> =
> To unsubscribe, send mail to [EMAIL PROTECTED] with
> the word "unsubscribe" in the message body, e.g., run the command
> echo unsubscribe | mail [EMAIL PROTECTED]
>
> =
> To unsubscribe, send mail to [EMAIL PROTECTED] with
> the word "unsubscribe" in the message body, e.g., run the command
> echo unsubscribe | mail [EMAIL PROTECTED]
>
>


=
To unsubscribe, send mail to [EMAIL PROTECTED] with
the word "unsubscribe" in the message body, e.g., run the command
echo unsubscribe | mail [EMAIL PROTECTED]




Re: spaces in filenames

2000-12-26 Thread Moshe Zadka

On 26 Dec 2000, Oleg Goldshmidt <[EMAIL PROTECTED]> wrote:

> $ mkdir "Foo Bar"
> $ cd Foo\ Bar/
> bash: cd: Foo: No such file or directory

It Works For Me(tm) on RH 6.2

=
To unsubscribe, send mail to [EMAIL PROTECTED] with
the word "unsubscribe" in the message body, e.g., run the command
echo unsubscribe | mail [EMAIL PROTECTED]




Re: ipchains

2000-12-26 Thread Alon Oz

Moshe Zadka wrote:
> 
> On Tue, 26 Dec 2000 17:53:08 +0200, Alon Oz <[EMAIL PROTECTED]> wrote:
> 
> > As you said, the sysadmin was an idiot, if a sysadmin wants
> > he can easily block ICQ.
> 
> ssh UDP forwarding to home machine. 'Nuff said.

1 problem though, by using firewall piercing techniques you probably
violate your contract with the company.
Note that techniques like you mentioned and other ones alike
leave the firewall ineffective and make the security
of the company's network dependent on the security of
the home user machine.

-- 
Alon Oz,
Aduva Research Team,
Mailto: [EMAIL PROTECTED]

--
A proud member in the Evil Linux cyberterrorist hackers (ELCH) 
organization
A who can launch Denial of Service attacks against the embedded devices
in your 6-slice toaster with advanced pingflood Open Source classified
exploit codes hidden inside strongly encrypted Russian mafia pornography
that innocent American children download from online gambling web sites 
located in the Northern Mariana Islands

=
To unsubscribe, send mail to [EMAIL PROTECTED] with
the word "unsubscribe" in the message body, e.g., run the command
echo unsubscribe | mail [EMAIL PROTECTED]




spaces in filenames

2000-12-26 Thread Oleg Goldshmidt


Hi, I see the following weird phenomenon: bash cannot recognize
filenames or directories that have spaces, unless I am root/su. This
is a typical example:

$ mkdir "Foo Bar"
$ cd Foo\ Bar/
bash: cd: Foo: No such file or directory
$ su
Password: 
# cd Foo\ Bar/
/home/oleg/tmp/Foo Bar

Platform: RH7.0 with kernel 2.2.16-22 on i686.

It does look like a bug in bash, since zsh, ksh, or tcsh work just
fine.

It seems that the bash version is the latest (did RH screw anything
up?):

$ bash --version
GNU bash, version 2.04.11(1)-release (i386-redhat-linux-gnu)
Copyright 1999 Free Software Foundation, Inc.

Does anyone know if it is a known bug? Fixes? I did not find a known
bug list for bash on the net. I'll use bashbug if no one reacts
shortly.

Just in case anyone thinks I am crazy to put spaces into filenames,
I need to access shared files on an NT server from my Linux.

-- 
Oleg Goldshmidt | Comgates Ltd. | [EMAIL PROTECTED] 
"... We work by wit, and not by witchcraft;
 And wit depends on dilatory time." [Shakespeare]

=
To unsubscribe, send mail to [EMAIL PROTECTED] with
the word "unsubscribe" in the message body, e.g., run the command
echo unsubscribe | mail [EMAIL PROTECTED]




Re: ipchains

2000-12-26 Thread Alon Oz

Moshe Zadka wrote:
> 
> On Mon, 25 Dec 2000 16:41:49 +0200, System1 <[EMAIL PROTECTED]> wrote:
> 
> > using ICQ remote attacker is able to make full port scan on networks behind
> > the firewall.
> 
> No, when a user uses the client with a bug, a remote attacker is able to

No, it's a protocol feature not a bug in a certain version.
Note that this exist in all the icq clients because of that.

> 
> > If ICQ gives people the ability to make scans of my servers that are behind
> > firewall I dont want it here. its only troubles.
> 
> People will go to great lengths to circumvent you (I can think of a couple
> of ways I'd circumvent it if I wanted to), so you'll just annoy them and not
> have any security benefit. A better thing to do is to let users run ICQ
> remotely on a DMZ'ed completely, and then politely ask them to do so.

Huh?! Run it on a DMZ? I don't get how you can do that in a way that
will
benefit the users and/or the security of your network.
If you mean running the clients
off a DMZ machine and making the clients connect to from the 
(safe) inner network, than it opens even larger security holes than
running
ICQ from the inside of your network.

> An even better way is to help users upgrade to a better ICQ version.

No, (read up)

> 
> In any way, I'm a strong advocate of the "company policy/polite request"
> methodology rather then the technical solutions, because the technical
> solutions *will* be circumvented. (I know -- I worked in a company
> that all of a sudden got a firewall and an idiot sysadmin. I saw the
> circumventions -- it took everyone who wanted to about one day
> to return to use ICQ)

As you said, the sysadmin was an idiot, if a sysadmin wants
he can easily block ICQ. Ofcourse he'll have to know
how to do it or it will not be effective (like in your situation).
And that's what all this thread is about.



-- 
Alon Oz,
Aduva Research Team,
Mailto: [EMAIL PROTECTED]

--
A proud member in the Evil Linux cyberterrorist hackers (ELCH) 
organization
A who can launch Denial of Service attacks against the embedded devices
in your 6-slice toaster with advanced pingflood Open Source classified
exploit codes hidden inside strongly encrypted Russian mafia pornography
that innocent American children download from online gambling web sites 
located in the Northern Mariana Islands

=
To unsubscribe, send mail to [EMAIL PROTECTED] with
the word "unsubscribe" in the message body, e.g., run the command
echo unsubscribe | mail [EMAIL PROTECTED]




Re: locale (PostgreSQL & Hebrew Charset)

2000-12-26 Thread Herouth Maoz

On Tuesday 26 December 2000 15:06, Tzafrir Cohen wrote:

> I looked at
> http://postgresql.readysetnet.com/devel-corner/docs/admin/multibyte.h
>tm and I don't see there anything about the iso8859-8 encoding.

That's because iso8859-8 is not a multibyte encoding, but a single-byte 
encoding. Utf-8 is a multibyte encoding (of the Unicode charset).

Herouth

ÝØ unsubscribe, send mail to [EMAIL PROTECTED] with
the word "unsubscribe" in the message body, e.g., run the command
echo unsubscribe | mail [EMAIL PROTECTED]




RE: spoofing DNS..

2000-12-26 Thread Eddie Harari

what exactly do you mean by spoofing DNS , 

 reply to requests that came to your dns server with fault data ???
 or spoof your IP ?

-Original Message-
From: Tizmo [mailto:[EMAIL PROTECTED]]
Sent: Tuesday, December 26, 2000 12:24 PM
To: [EMAIL PROTECTED]
Subject: spoofing DNS..


hey list,
i heard about spoffing dns in linux .. like, changing your ip address to
what ever you like it to be.
i just wanted to know if it's true and if it is i really would like to know
how it's can be done.
thanks.


=
To unsubscribe, send mail to [EMAIL PROTECTED] with
the word "unsubscribe" in the message body, e.g., run the command
echo unsubscribe | mail [EMAIL PROTECTED]

=
To unsubscribe, send mail to [EMAIL PROTECTED] with
the word "unsubscribe" in the message body, e.g., run the command
echo unsubscribe | mail [EMAIL PROTECTED]




RE: ipchains

2000-12-26 Thread Moshe Zadka

On Mon, 25 Dec 2000 16:41:49 +0200, System1 <[EMAIL PROTECTED]> wrote:

> using ICQ remote attacker is able to make full port scan on networks behind
> the firewall.

No, when a user uses the client with a bug, a remote attacker is able to

> If ICQ gives people the ability to make scans of my servers that are behind
> firewall I dont want it here. its only troubles.

People will go to great lengths to circumvent you (I can think of a couple
of ways I'd circumvent it if I wanted to), so you'll just annoy them and not
have any security benefit. A better thing to do is to let users run ICQ
remotely on a DMZ'ed completely, and then politely ask them to do so.
An even better way is to help users upgrade to a better ICQ version.

In any way, I'm a strong advocate of the "company policy/polite request"
methodology rather then the technical solutions, because the technical
solutions *will* be circumvented. (I know -- I worked in a company
that all of a sudden got a firewall and an idiot sysadmin. I saw the
circumventions -- it took everyone who wanted to about one day
to return to use ICQ)

=
To unsubscribe, send mail to [EMAIL PROTECTED] with
the word "unsubscribe" in the message body, e.g., run the command
echo unsubscribe | mail [EMAIL PROTECTED]




Re: Linux Installation on mini-laptops

2000-12-26 Thread Gilad Ben-Yossef



Manor G. wrote:

> anyone has any sort of experience with installing linux
> on a mini-laptop that has a PCMCIA 1.44 floopy disk 
> and an external PCMCIA Cd-rom 
> [Toshiba Libretto 70ct]
> 


I have installed without a problem RH6.x on a NEC mobio, which is the 
twin of the Libretto, in the configuration you mentioned.

Gilad.



-- 
Gilad Ben-Yossef <[EMAIL PROTECTED]>
http://benyossef.com :: +972(54)756701
"Anything that can go wrong, will go wrong, while interrupts are disabled. "
-- Murphey's law of kernel programing.


=
To unsubscribe, send mail to [EMAIL PROTECTED] with
the word "unsubscribe" in the message body, e.g., run the command
echo unsubscribe | mail [EMAIL PROTECTED]




Re: locale (PostgreSQL & Hebrew Charset)

2000-12-26 Thread Tzafrir Cohen

On Tue, 26 Dec 2000, Ben-Nes Michael wrote:

> It seems that locale will work though it will reduce speed :(

BTW: what are the pros and cons of using UTF-8 for your application? (this
still does not handle sorting etc., of course)

I looked at
http://postgresql.readysetnet.com/devel-corner/docs/admin/multibyte.htm
and I don't see there anything about the iso8859-8 encoding.

> 
> in locale i have two intresting option
> 
> hebrew
> iw_IL
> 
> any one know what is the diffrence ?

"iw" is deprecated ("iwrit", even though it is written with bet, and not
with vav), you should use "he". 

The locale should also include the courtry name (i.e.: he_IL).  Actually
it can include the character set as well (i.e.: the current locale is
he_IL.ISO-8859-8, but in the future there may be he_IL.UTF-8)  However,
there is currently no other "he" locale (at least not in glibc), and ths
in practice "he" is a safe choice.

However, when I look at /usr/share/locale.alias (that's the one by glibc)
at my computer, I only see: 

hebrew  iw_IL.ISO-8859-8

(I have a "he" locale on my system. That is what comes with glibc (at
least the one that comes with mandrake. in the original glibc tarball I
see a locale file called "he_IL")

>From /usr/lib/X11/locale/locale.alias :
he  he_IL.ISO8859-8
he_IL   he_IL.ISO8859-8
he_IL.iso88598  he_IL.ISO8859-8
# iw was the old iso code for hebrew (now he)
# those lines should be deleted in a near future
iw  he_IL.ISO8859-8
iw_IL   he_IL.ISO8859-8
iw_IL.iso88598  he_IL.ISO8859-8

> 
> Tzafrir Cohen wrote:
> 
> > On Mon, 25 Dec 2000, Ben-Nes Michael wrote:
> >
> > > Hi
> > >
> > > does any one know if postgresl (7) support hebrew charset ? (sorting,
> > > group ... )
> > > If so, what is the way to enable it ?
> >
> > Can't give you a direct answer, but:
> >
> > Does pgsql uses localized glibc functions? see locale (7).
> >
> > If so: set the LANG (or just some appropriate LC_* vars) to "he" (or
> > "he_IL" or whatever)
> >
> > Although setting the language for the whole process may not be desirable
> > for such an application.

Accrding to the page referenced by Heruth:
http://postgresql.readysetnet.com/devel-corner/docs/admin/charset.htm#LOCALE

This is how it should be done

-- 
Tzafrir Cohen
mailto:[EMAIL PROTECTED]
http://www.technion.ac.il/~tzafrir


=
To unsubscribe, send mail to [EMAIL PROTECTED] with
the word "unsubscribe" in the message body, e.g., run the command
echo unsubscribe | mail [EMAIL PROTECTED]




Re: locale (PostgreSQL & Hebrew Charset)

2000-12-26 Thread Ben-Nes Michael

It seems that locale will work though it will reduce speed :(

in locale i have two intresting option

hebrew
iw_IL

any one know what is the diffrence ?

Tzafrir Cohen wrote:

> On Mon, 25 Dec 2000, Ben-Nes Michael wrote:
>
> > Hi
> >
> > does any one know if postgresl (7) support hebrew charset ? (sorting,
> > group ... )
> > If so, what is the way to enable it ?
>
> Can't give you a direct answer, but:
>
> Does pgsql uses localized glibc functions? see locale (7).
>
> If so: set the LANG (or just some appropriate LC_* vars) to "he" (or
> "he_IL" or whatever)
>
> Although setting the language for the whole process may not be desirable
> for such an application.
>
> --
> Tzafrir Cohen
> mailto:[EMAIL PROTECTED]
> http://www.technion.ac.il/~tzafrir

--
--
Canaan Surfing Ltd.
Internet Service Providers
Ben-Nes Michael - Manager
Tel: 972-6-6925757
Fax: 972-6-6925858
http://www.canaan.co.il
--



=
To unsubscribe, send mail to [EMAIL PROTECTED] with
the word "unsubscribe" in the message body, e.g., run the command
echo unsubscribe | mail [EMAIL PROTECTED]




Re: rsh problems

2000-12-26 Thread Ariel Biener

On Tue, 26 Dec 2000, Erez Doron wrote:


Again, that is because rsh without any command does rlogin and not rsh,
and works with a different service (login/tcp and not shell/tcp).

--Ariel
> HI
> 
> I found it to be a firewall problem ...
> ( for some reson the remote host tries to open connections to the local
> machine,
>  this does not happen when i use rsh without any command )
> 
> 
> Ariel Biener wrote:
> 
> > On Mon, 25 Dec 2000, Erez Doron wrote:
> >
> > When you use rsh without a command, it uses rlogin.
> >
> > Please send us your /etc/inetd.conf configuration, and also check it
> > yourself (on the receiving host).
> >
> > If you are able to use strace, you can also debug both the rsh client on
> >the calling side, and the in.rshd daemon on the receiving side.
> >
> > --Ariel
> > > HI
> > >
> > > I'm using the 'rsh'command to execute command on a remote computer:
> > > when i issue:
> > > local> rsh remote echo hello
> > >
> > > it waits for a lot of time and tells me:
> > > poll: protocol failure in circuit setup
> > >
> > > but if i do only 'rsh remote' and then ' echohello' it works !
> > >
> > > any idea ?
> > >
> > > thanks
> > > erez.
> > >
> > >
> > >
> > > =
> > > To unsubscribe, send mail to [EMAIL PROTECTED] with
> > > the word "unsubscribe" in the message body, e.g., run the command
> > > echo unsubscribe | mail [EMAIL PROTECTED]
> > >
> >
> > --
> > Ariel Biener
> > e-mail: [EMAIL PROTECTED]
> > PGP(6.5.8) public key http://www.tau.ac.il/~ariel/pgp.html
> >
> > =
> > To unsubscribe, send mail to [EMAIL PROTECTED] with
> > the word "unsubscribe" in the message body, e.g., run the command
> > echo unsubscribe | mail [EMAIL PROTECTED]
> 
> 
> 

--
Ariel Biener
e-mail: [EMAIL PROTECTED]
PGP(6.5.8) public key http://www.tau.ac.il/~ariel/pgp.html


=
To unsubscribe, send mail to [EMAIL PROTECTED] with
the word "unsubscribe" in the message body, e.g., run the command
echo unsubscribe | mail [EMAIL PROTECTED]




spoofing DNS..

2000-12-26 Thread Tizmo

hey list,
i heard about spoffing dns in linux .. like, changing your ip address to
what ever you like it to be.
i just wanted to know if it's true and if it is i really would like to know
how it's can be done.
thanks.


=
To unsubscribe, send mail to [EMAIL PROTECTED] with
the word "unsubscribe" in the message body, e.g., run the command
echo unsubscribe | mail [EMAIL PROTECTED]




Re: vacation program

2000-12-26 Thread Moshe Zadka

On Tue, 26 Dec 2000, Erez Doron <[EMAIL PROTECTED]> wrote:

> I have installed the perl version ( found it somwhere on slashdot or
> freshmeat ).
> and it worked

And we're supposed to search both so we can see what the problem is?

> I must make it work for the aliases also
> any ideas ?

Either look at the code, ask the author, or ask us again *with a 
link to the source code*. It's hard to debug Perl -- it's harder
yet when we have to guess at the bug.

Oh, well, I supposed I'll try to use some of my ESP abilities.
vacation has a built-in feature *not* to send vacation replies
to mailing lists you're subscribed to (thank god!). So, it
looks in the To: field, and if it doesn't see your user name
it just forgets about it. Whatever you do, *don't* comment
out that feature or the IGLU cabal, without existing of course, will
come to your house and do nasty things to you. *Do* try to 
give the program the ability to compare against several
possible addresses.

IM2000, anyone?

=
To unsubscribe, send mail to [EMAIL PROTECTED] with
the word "unsubscribe" in the message body, e.g., run the command
echo unsubscribe | mail [EMAIL PROTECTED]




Re: rsh problems

2000-12-26 Thread Erez Doron

HI

I found it to be a firewall problem ...
( for some reson the remote host tries to open connections to the local
machine,
 this does not happen when i use rsh without any command )


Ariel Biener wrote:

> On Mon, 25 Dec 2000, Erez Doron wrote:
>
> When you use rsh without a command, it uses rlogin.
>
> Please send us your /etc/inetd.conf configuration, and also check it
> yourself (on the receiving host).
>
> If you are able to use strace, you can also debug both the rsh client on
> the calling side, and the in.rshd daemon on the receiving side.
>
> --Ariel
> > HI
> >
> > I'm using the 'rsh'command to execute command on a remote computer:
> > when i issue:
> > local> rsh remote echo hello
> >
> > it waits for a lot of time and tells me:
> > poll: protocol failure in circuit setup
> >
> > but if i do only 'rsh remote' and then ' echohello' it works !
> >
> > any idea ?
> >
> > thanks
> > erez.
> >
> >
> >
> > =
> > To unsubscribe, send mail to [EMAIL PROTECTED] with
> > the word "unsubscribe" in the message body, e.g., run the command
> > echo unsubscribe | mail [EMAIL PROTECTED]
> >
>
> --
> Ariel Biener
> e-mail: [EMAIL PROTECTED]
> PGP(6.5.8) public key http://www.tau.ac.il/~ariel/pgp.html
>
> =
> To unsubscribe, send mail to [EMAIL PROTECTED] with
> the word "unsubscribe" in the message body, e.g., run the command
> echo unsubscribe | mail [EMAIL PROTECTED]




=
To unsubscribe, send mail to [EMAIL PROTECTED] with
the word "unsubscribe" in the message body, e.g., run the command
echo unsubscribe | mail [EMAIL PROTECTED]




vacation program

2000-12-26 Thread Erez Doron

HI

after having problems with the binary 'vacation' program ( didn't work
for me )
I have installed the perl version ( found it somwhere on slashdot or
freshmeat ).
and it worked

now I found it to work only if mail was sent to my username ( i.e.
[EMAIL PROTECTED] )
and not if it was sent to my alias ( [EMAIL PROTECTED] ).

I must make it work for the aliases also

any ideas ?

regards
erez.



=
To unsubscribe, send mail to [EMAIL PROTECTED] with
the word "unsubscribe" in the message body, e.g., run the command
echo unsubscribe | mail [EMAIL PROTECTED]




Re: ipchains

2000-12-26 Thread Alon Oz

"Stanislav Malyshev a.k.a Frodo" wrote:
> 
> AO>> But if icq.com(example) got my packet and know my "secret" intranet
> AO>> addresses
> 
> Oh, yeah, those defined in top-secret RFC1918? 10.1.1.1? 10.10.1.1?
> 192.168.1.1? 172.16.1.1? Am I l33t haxx0r already?
> Guess how many pings is it going to take me to know each
> internet-accessible address on your network after knowing one by looking
> up your mailserver?

The thing is, through ICQ i can know the following:
1. the computer on 192.168.1.78(example) is up
2. It can receive connection to the ICQ port
3. the NAT gateway/fw allows "related" packets to pass from icq to
   192.168.1.78
4. icq packets are classified as "related".

Now any man-in-the-middle attack becomes very easy.
You spoof your address (using known flaws in DNS)
and easily get into the inner network.

-- 
Alon Oz,
Aduva Research Team,
Mailto: [EMAIL PROTECTED]

--
It's always darkest just before it goes pitch black.

=
To unsubscribe, send mail to [EMAIL PROTECTED] with
the word "unsubscribe" in the message body, e.g., run the command
echo unsubscribe | mail [EMAIL PROTECTED]