Re: Uh-oh. Cracked allready. I think...

2002-05-24 Thread Steve Meyer
There is a good chance if you have been rooted, that the attacker installed a rootkit to cover his tracks. I saw a good rootkit detecter on http://freshmeat.net/ . Just do a search for it on there. From: Tim Haynes [EMAIL PROTECTED] Reply-To: [EMAIL PROTECTED] To: Kjetil Kjernsmo [EMAIL

Emails being sent from my network

2002-05-24 Thread Langdon Green
Hi guys, I am having a bit of trouble with some dodgy emails getting sent to my friend...they are strange, not just normal spam, the emails have information that is from my company web site (hosted off site) Anyway, the header of the emails has this line: Received: from Wzk ([MYIP]) by

Re: Emails being sent from my network

2002-05-24 Thread Karl Breitner
Langdon Green skrev: Hi guys, I am having a bit of trouble with some dodgy emails getting sent to my friend...they are strange, not just normal spam, the emails have information that is from my company web site (hosted off site) Anyway, the header of the emails has this line: Received:

Re: Uh-oh. Cracked allready. I think...

2002-05-24 Thread Kjetil Kjernsmo
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Dear Tim, dear all, Thanks for all the responses. I realize it's pretty bold trying put a box on the net without having extensive admin experience beforehand. But I think I'm learning fast, and I hope I'll be able to do it without placing any

Generating Mail passwords

2002-05-24 Thread Lars Roland Kristiansen
Hi i have configuret postfix, pop-before-smpt and ipop3 (ssl). On a debian mail server. I have 200 users and whant some new more secure passwords (not to long though). Is there a simple way to generate secure passwords so i can use them with adduser Thanks ___ Mvh./Yours sincerely Lars

Re: Generating Mail passwords

2002-05-24 Thread Mark Janssen
On Fri, 2002-05-24 at 15:04, Lars Roland Kristiansen wrote: Hi i have configuret postfix, pop-before-smpt and ipop3 (ssl). On a debian mail server. I have 200 users and whant some new more secure passwords (not to long though). Is there a simple way to generate secure passwords so i can use

Re: Generating Mail passwords

2002-05-24 Thread Alain Tesio
On Fri, 24 May 2002 15:04:50 +0200 (MET DST) Lars Roland Kristiansen [EMAIL PROTECTED] wrote: Hi i have configuret postfix, pop-before-smpt and ipop3 (ssl). On a debian mail server. I have 200 users and whant some new more secure passwords (not to long though). Is there a simple way to

script for security update notification

2002-05-24 Thread Nathan Valentine
I'm thinking of writing a script but I am hoping that someone else has beaten me to the punch. Perhaps someone has seen something that will do this: 1) Check the Debian security announcement list. 2) Compare new announcements to the local package database. 3) If vulnerable packages installed,

Re: Uh-oh. Cracked allready. I think...

2002-05-24 Thread Tim Haynes
Kjetil Kjernsmo [EMAIL PROTECTED] writes: Thanks for all the responses. I realize it's pretty bold trying put a box on the net without having extensive admin experience beforehand. But I think I'm learning fast, and I hope I'll be able to do it without placing any burden on the rest of

Re: [d-security] script for security update notification

2002-05-24 Thread Christian Hammers
On Fri, May 24, 2002 at 09:41:46AM -0400, Nathan Valentine wrote: 1) Check the Debian security announcement list. 2) Compare new announcements to the local package database. 3) If vulnerable packages installed, send an 'I need updated' email to an address defined by the SysAdmin. Another nice

Re: Generating Mail passwords

2002-05-24 Thread Tomasz Papszun
On Fri, 24 May 2002 at 15:04:50 +0200, Lars Roland Kristiansen wrote: [...] I have 200 users and whant some new more secure passwords (not to long though). Is there a simple way to generate secure passwords so i can use them with adduser pwgen, makepasswd, apg (since Woody). [ 11 lines

Re: Uh-oh. Cracked allready. I think...

2002-05-24 Thread Kjetil Kjernsmo
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 24 May 2002, Tim Haynes wrote: Unfortunately, the only way to examine all the files on the disk/s is to reboot the box off clean r/o media (read: rescue CD), mount them r/o, and examine them by hand. Yeah, I guess so. You're highly unlikely to

Re: Uh-oh. Cracked allready. I think...

2002-05-24 Thread Reagan Blundell
On Fri, May 24, 2002 at 02:23:38PM +0200, Kjetil Kjernsmo wrote: OK. This is what nmap says, launched from my workstation: [snip] 137/tcpfilterednetbios-ns 138/tcpfilterednetbios-dgm 139/tcpfilterednetbios-ssn [snip] 6346/tcp filteredgnutella filtered means

Re: How create 2 server mod-ssl certificates

2002-05-24 Thread Michael Schmidlin
Tue, 07 May 2002 17:25:01 +0200 Manuel Segura [EMAIL PROTECTED] wrote: Hi, Hello, I am creating some server mod-ssl certificates using the script mod-ssl-makecert. I used to do it wih openssl. For example bash:~$ openssl genrsa -des3 -rand /dev/random -out www.domain.tld.key 1024

Re: script for security update notification

2002-05-24 Thread Matt Zimmerman
On Fri, May 24, 2002 at 09:41:46AM -0400, Nathan Valentine wrote: I'm thinking of writing a script but I am hoping that someone else has beaten me to the punch. Perhaps someone has seen something that will do this: 1) Check the Debian security announcement list. 2) Compare new

Re: script for security update notification

2002-05-24 Thread Teun Vink
On Fri, 24 May 2002, Matt Zimmerman wrote: On Fri, May 24, 2002 at 09:41:46AM -0400, Nathan Valentine wrote: I'm thinking of writing a script but I am hoping that someone else has beaten me to the punch. Perhaps someone has seen something that will do this: 1) Check the Debian

Unidentified subject!

2002-05-24 Thread steve
unsubscribe -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]

unsubscribe

2002-05-24 Thread steve
unsubscribe -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]

Re: Uh-oh. Cracked allready. I think...

2002-05-24 Thread Steve Meyer
There is a good chance if you have been rooted, that the attacker installed a rootkit to cover his tracks. I saw a good rootkit detecter on http://freshmeat.net/ . Just do a search for it on there. From: Tim Haynes [EMAIL PROTECTED] Reply-To: [EMAIL PROTECTED] To: Kjetil Kjernsmo [EMAIL

Emails being sent from my network

2002-05-24 Thread Langdon Green
Hi guys, I am having a bit of trouble with some dodgy emails getting sent to my friend...they are strange, not just normal spam, the emails have information that is from my company web site (hosted off site) Anyway, the header of the emails has this line: Received: from Wzk ([MYIP]) by

Re: Emails being sent from my network

2002-05-24 Thread Karl Breitner
Langdon Green skrev: Hi guys, I am having a bit of trouble with some dodgy emails getting sent to my friend...they are strange, not just normal spam, the emails have information that is from my company web site (hosted off site) Anyway, the header of the emails has this line: Received:

Re: Uh-oh. Cracked allready. I think...

2002-05-24 Thread Kjetil Kjernsmo
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Dear Tim, dear all, Thanks for all the responses. I realize it's pretty bold trying put a box on the net without having extensive admin experience beforehand. But I think I'm learning fast, and I hope I'll be able to do it without placing any burden

Generating Mail passwords

2002-05-24 Thread Lars Roland Kristiansen
Hi i have configuret postfix, pop-before-smpt and ipop3 (ssl). On a debian mail server. I have 200 users and whant some new more secure passwords (not to long though). Is there a simple way to generate secure passwords so i can use them with adduser Thanks ___ Mvh./Yours sincerely Lars

Re: Generating Mail passwords

2002-05-24 Thread Mark Janssen
On Fri, 2002-05-24 at 15:04, Lars Roland Kristiansen wrote: Hi i have configuret postfix, pop-before-smpt and ipop3 (ssl). On a debian mail server. I have 200 users and whant some new more secure passwords (not to long though). Is there a simple way to generate secure passwords so i can use

Re: Generating Mail passwords

2002-05-24 Thread Alain Tesio
On Fri, 24 May 2002 15:04:50 +0200 (MET DST) Lars Roland Kristiansen [EMAIL PROTECTED] wrote: Hi i have configuret postfix, pop-before-smpt and ipop3 (ssl). On a debian mail server. I have 200 users and whant some new more secure passwords (not to long though). Is there a simple way to

script for security update notification

2002-05-24 Thread Nathan Valentine
I'm thinking of writing a script but I am hoping that someone else has beaten me to the punch. Perhaps someone has seen something that will do this: 1) Check the Debian security announcement list. 2) Compare new announcements to the local package database. 3) If vulnerable packages installed,

Re: Uh-oh. Cracked allready. I think...

2002-05-24 Thread Tim Haynes
Kjetil Kjernsmo [EMAIL PROTECTED] writes: Thanks for all the responses. I realize it's pretty bold trying put a box on the net without having extensive admin experience beforehand. But I think I'm learning fast, and I hope I'll be able to do it without placing any burden on the rest of the

Re: [d-security] script for security update notification

2002-05-24 Thread Christian Hammers
On Fri, May 24, 2002 at 09:41:46AM -0400, Nathan Valentine wrote: 1) Check the Debian security announcement list. 2) Compare new announcements to the local package database. 3) If vulnerable packages installed, send an 'I need updated' email to an address defined by the SysAdmin. Another nice

Re: Generating Mail passwords

2002-05-24 Thread Tomasz Papszun
On Fri, 24 May 2002 at 15:04:50 +0200, Lars Roland Kristiansen wrote: [...] I have 200 users and whant some new more secure passwords (not to long though). Is there a simple way to generate secure passwords so i can use them with adduser pwgen, makepasswd, apg (since Woody). [ 11 lines

Re: Uh-oh. Cracked allready. I think...

2002-05-24 Thread Kjetil Kjernsmo
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 24 May 2002, Tim Haynes wrote: Unfortunately, the only way to examine all the files on the disk/s is to reboot the box off clean r/o media (read: rescue CD), mount them r/o, and examine them by hand. Yeah, I guess so. You're highly unlikely to

Re: Uh-oh. Cracked allready. I think...

2002-05-24 Thread Tim Haynes
Kjetil Kjernsmo [EMAIL PROTECTED] writes: On 24 May 2002, Tim Haynes wrote: Unfortunately, the only way to examine all the files on the disk/s is to reboot the box off clean r/o media (read: rescue CD), mount them r/o, and examine them by hand. Yeah, I guess so. In the absence of this,

Re: Uh-oh. Cracked allready. I think...

2002-05-24 Thread Reagan Blundell
On Fri, May 24, 2002 at 02:23:38PM +0200, Kjetil Kjernsmo wrote: OK. This is what nmap says, launched from my workstation: [snip] 137/tcpfilterednetbios-ns 138/tcpfilterednetbios-dgm 139/tcpfilterednetbios-ssn [snip] 6346/tcp filteredgnutella filtered means

Re: How create 2 server mod-ssl certificates

2002-05-24 Thread Michael Schmidlin
Tue, 07 May 2002 17:25:01 +0200 Manuel Segura [EMAIL PROTECTED] wrote: Hi, Hello, I am creating some server mod-ssl certificates using the script mod-ssl-makecert. I used to do it wih openssl. For example bash:~$ openssl genrsa -des3 -rand /dev/random -out www.domain.tld.key 1024

Re: script for security update notification

2002-05-24 Thread Javier Fernández-Sanguino Peña
On Fri, May 24, 2002 at 09:41:46AM -0400, Nathan Valentine wrote: I'm thinking of writing a script but I am hoping that someone else has beaten me to the punch. Perhaps someone has seen something that will do this: 1) Check the Debian security announcement list. 2) Compare new

Re: script for security update notification

2002-05-24 Thread Matt Zimmerman
On Fri, May 24, 2002 at 09:41:46AM -0400, Nathan Valentine wrote: I'm thinking of writing a script but I am hoping that someone else has beaten me to the punch. Perhaps someone has seen something that will do this: 1) Check the Debian security announcement list. 2) Compare new

Re: script for security update notification

2002-05-24 Thread Teun Vink
On Fri, 24 May 2002, Matt Zimmerman wrote: On Fri, May 24, 2002 at 09:41:46AM -0400, Nathan Valentine wrote: I'm thinking of writing a script but I am hoping that someone else has beaten me to the punch. Perhaps someone has seen something that will do this: 1) Check the Debian

Re: [d-security] script for security update notification

2002-05-24 Thread Matt Zimmerman
On Fri, May 24, 2002 at 03:54:48PM +0200, Christian Hammers wrote: On Fri, May 24, 2002 at 09:41:46AM -0400, Nathan Valentine wrote: 1) Check the Debian security announcement list. 2) Compare new announcements to the local package database. 3) If vulnerable packages installed, send an 'I

Unidentified subject!

2002-05-24 Thread steve
unsubscribe -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]

unsubscribe

2002-05-24 Thread steve
unsubscribe -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]