other mysterious port things

2001-05-29 Thread Jogi Hofmueller
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 hi! lately i was running nmap to check my office machine. to my surprise i found an open port 'cadsi-lm' (1387). running nmap again the port was not there anymore. on future runs i found my machine listening on different registered non-privileged

Re: other mysterious port things

2001-05-29 Thread Pedro Zorzenon Neto
On Tue, May 29, 2001 at 12:07:47PM +0100, Tim Haynes wrote: sudo netstat -plan | grep LIST just a small note: if your LC enviroment variables are set to other language, you may need to change LIST for other word. (in pt_BR is OUÇA) -- Pedro Zorzenon Neto

Re: other mysterious port things

2001-05-29 Thread Ken Seefried
Tim Haynes writes: sigh Why do people persist in using nmap at test phase? Sure, if you've been cracked, scan yourself if you want, but if you're looking to see `what do I have open?' then nmap is the *last* tool I'd use. Go back to sudo netstat -plan | grep LIST Well...that

Re: Security in general

2001-05-29 Thread Karl E. Jorgensen
On Tue, May 29, 2001 at 10:50:07AM +0200, kjfsgjks ksjgkfhfd wrote: Hi, kjfsgjks: You probably have a real name. Why not use it? I have a question which has been bothering me all along, with windows / linux / *bsd / etc. In this case, it's about Debian so I thought I'd post my question

Re: other mysterious port things

2001-05-29 Thread Ken Seefried
Cesar writes: Hi ! I'm a disquette with this utilities clean. #mount /dev/fd0 /floppy #cd /floppy #./netstat -antp Don't forget to mount -ro or write protect the floppy. :-) On linux, AFASIK, netstat relies on /dev/net and friends not to lie to it. This is a poor

Re: apt and security

2001-05-29 Thread Jason Thomas
actually I thought some sort of log for dpkg/apt would be good, just to keep a record of when something was installed or upgraded. so you know what changed. On Tue, May 29, 2001 at 09:36:37AM -0500, Matthew H. Ray wrote: I've got tripwire keeping an eye on my filesystems so I'm notified

root fs/crypted

2001-05-29 Thread clemens
SAWFASP^* as laws around the globe are forged to weak personal privacy, police knocking on one's door, because of portscanning a previously hacked website, and - i don't have to tell those of you, which are reading slashdot - as pretty strange things start to happend worldwide, i'm getting

Re: root fs/crypted

2001-05-29 Thread Paul Lowe
I like this. Would it be difficult to modify Debian, so that upon install, it creates an encrypted root volume and starts things off the right way? -Original Message- From: clemens [EMAIL PROTECTED] To: [EMAIL PROTECTED] [EMAIL PROTECTED] Date: Tuesday, May 29, 2001 6:04 PM Subject: root

RE: root fs/crypted

2001-05-29 Thread Curt Howland
there is already a HowTo on how to create an encrypted loop-back file system. it doesn't encrypt the whole disk, but it could certainly hold anything worth having encrypted. don't get me wrong, i fully understand the reasons behind putting the entire system behind a good pass-phrase. with the

Re: root fs/crypted

2001-05-29 Thread paul
I see it as more than this. I see it as ensuring that the data on the disk does not get accessed by anyone never intended to see it. (physically, of course). I guess this would mostly be cool for thwarting things like police raids, servers vulnerable in remote locations (e.g. colocation, etc). My

Re: hi, any help ? about an evil mysterious crazy Open tcp port ?

2001-05-29 Thread Juha Jäykkä
how, can i see the tcp port 4350 that states to be opened useing nmap There is _the_ official document of registered ports at http://www.iana.org/assignments/port-numbers and it claims 4350 is Net Device - what ever that means. The entry is created by microsoft so we may assume it is some

Security in general

2001-05-29 Thread kjfsgjks ksjgkfhfd
Hi, I have a question which has been bothering me all along, with windows / linux / *bsd / etc. In this case, it's about Debian so I thought I'd post my question here. Right now I have a linux-box (Debian 2.2r2) doing my masquerading/firewalling. It has a dynamic ip (and changes quite often,

other mysterious port things

2001-05-29 Thread Jogi Hofmueller
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 hi! lately i was running nmap to check my office machine. to my surprise i found an open port 'cadsi-lm' (1387). running nmap again the port was not there anymore. on future runs i found my machine listening on different registered non-privileged

Re: other mysterious port things

2001-05-29 Thread Tim Haynes
Jogi Hofmueller [EMAIL PROTECTED] writes: lately i was running nmap to check my office machine. to my surprise i found an open port 'cadsi-lm' (1387). running nmap again the port was not there anymore. on future runs i found my machine listening on different registered non-privileged ports

Re: other mysterious port things

2001-05-29 Thread Ken Seefried
Tim Haynes writes: sigh Why do people persist in using nmap at test phase? Sure, if you've been cracked, scan yourself if you want, but if you're looking to see `what do I have open?' then nmap is the *last* tool I'd use. Go back to sudo netstat -plan | grep LIST Well...that would

apt and security

2001-05-29 Thread Matthew H. Ray
I've got tripwire keeping an eye on my filesystems so I'm notified whenever a change is made. I recently added a couple of packages via apt, and I noticed a number of files were modified that I hadn't expected changed. I don't recall the names of the packages I upgraded (there were a bunch), but

Re: other mysterious port things

2001-05-29 Thread Cesar
Hi ! I'm a disquette with this utilities clean. #mount /dev/fd0 /floppy #cd /floppy #./netstat -antp Regards César. Ken Seefried wrote: Tim Haynes writes: sigh Why do people persist in using nmap at test phase? Sure, if you've been cracked, scan yourself if you want, but

Re: other mysterious port things

2001-05-29 Thread Hubert Chan
On Tue, 29 May 2001, Ken Seefried wrote: Tim Haynes writes: sigh Why do people persist in using nmap at test phase? Sure, if you've been cracked, scan yourself if you want, but if you're looking to see `what do I have open?' then nmap is the *last* tool I'd use. Go back to

Re: other mysterious port things

2001-05-29 Thread Cesar
Sorry I have :)) Cesar wrote: Hi ! I have a disquette with this utilities clean. #mount /dev/fd0 /floppy #cd /floppy #./netstat -antp Regards César.

Re: Security in general

2001-05-29 Thread Karl E. Jorgensen
On Tue, May 29, 2001 at 10:50:07AM +0200, kjfsgjks ksjgkfhfd wrote: Hi, kjfsgjks: You probably have a real name. Why not use it? I have a question which has been bothering me all along, with windows / linux / *bsd / etc. In this case, it's about Debian so I thought I'd post my question

Re: other mysterious port things

2001-05-29 Thread Ken Seefried
Cesar writes: Hi ! I'm a disquette with this utilities clean. #mount /dev/fd0 /floppy #cd /floppy #./netstat -antp Don't forget to mount -ro or write protect the floppy. :-) On linux, AFASIK, netstat relies on /dev/net and friends not to lie to it. This is a poor assumption

Re: apt and security

2001-05-29 Thread Jason Thomas
actually I thought some sort of log for dpkg/apt would be good, just to keep a record of when something was installed or upgraded. so you know what changed. On Tue, May 29, 2001 at 09:36:37AM -0500, Matthew H. Ray wrote: I've got tripwire keeping an eye on my filesystems so I'm notified whenever

Re: root fs/crypted

2001-05-29 Thread Paul Lowe
I like this. Would it be difficult to modify Debian, so that upon install, it creates an encrypted root volume and starts things off the right way? -Original Message- From: clemens [EMAIL PROTECTED] To: debian-security@lists.debian.org debian-security@lists.debian.org Date: Tuesday, May

RE: root fs/crypted

2001-05-29 Thread Curt Howland
there is already a HowTo on how to create an encrypted loop-back file system. it doesn't encrypt the whole disk, but it could certainly hold anything worth having encrypted. don't get me wrong, i fully understand the reasons behind putting the entire system behind a good pass-phrase. with the