Re: ircd
kalin mintchev wrote: hi all... i found this 2 lines in the netstat output on one of my machines. we are not running ircd and according to nmap ports 3483 and 2143 are closed... can somebody please explain?? thanks. tcp4 0 0 server.3484 zagreb.hr.eu.und.ircd ESTABLISHED tcp4 0 0 server.2143 free.tyranz.com.ircd ESTABLISHED Try using sockstat (with -4 -p 6667 for instance) to see who has the sockets open. -Martin ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
Re: ircd
Try using sockstat (with -4 -p 6667 for instance) to see who has the sockets open. thanks - that was helpful. ran it with -4. the -p flag is not there on 4.10. the output is: nobody httpd 61429 tcp4 66.117.34.36:3484161.53.178.240:6667 nobody httpd 6142 10 tcp4 66.117.34.36:2143 206.53.62.198:6667 that makes my machine a client. and it's started by apache. hmmm... can this be some kind of chat application/applet embedded in an html page on somebody's website? thanks... -Martin -- -- In a world without walls or fences, who needs Windows and Gates? ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
Re: ircd
On 6/8/05, kalin mintchev [EMAIL PROTECTED] wrote: .. that makes my machine a client. and it's started by apache. hmmm... can this be some kind of chat application/applet embedded in an html page on somebody's website? Or it is possible that someone break your system using a known vuln. In the last two months many php script or perl script like awstat suffer of remote code execution problem. Check the scripts that yours users use. thanks... Sorry for very bad english, Best regards -- Name: Riccardo Giuntoli Email: [EMAIL PROTECTED] Homepage: http://www.luxoro.org/ Location: Genova, Italy 6BONE Handle: RG581-6BONE PGP Key: 0x67123739 PGP Fingerprint: CE75 16B5 D855 842F AB54 FB5C DDC6 4640 6712 3739 Key server: hkp://wwwkeys.eu.pgp.net ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
Re: ircd
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 kalin mintchev wrote: | | hi all... | | i found this 2 lines in the netstat output on one of my machines. we are | not running ircd and according to nmap ports 3483 and 2143 are closed... | | can somebody please explain?? thanks. | | tcp4 0 0 server.3484 zagreb.hr.eu.und.ircd | ESTABLISHED | tcp4 0 0 server.2143 free.tyranz.com.ircd | ESTABLISHED Are you running any kind of irc client? The output means: There are 2 connections, one on port 3484, and another on 2143 connected to zagreb.hr.eu.und and free.tyranz.com on the port for ircd, port 6667. Some trojens use irc channels for control, might look into that. - -- Bob Bomar [EMAIL PROTECTED] http://www.bomar.us/~bob -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.4 (Darwin) Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org iD8DBQFCpmUH9Jm/aTrtdKoRArViAJ4pU6PUuUXD/Hu0yR03/SqwaYi9ewCgop6K WZz26GJmYJSl/FpbquE0hh4= =Yqid -END PGP SIGNATURE- ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
Re: ircd
I concur. You might also want to run chkrootkit (security/chkrootkit) to see if you've been 0wned so to speak. On Tue, 7 Jun 2005, Bob Bomar wrote: kalin mintchev wrote: | | hi all... | | i found this 2 lines in the netstat output on one of my machines. we are | not running ircd and according to nmap ports 3483 and 2143 are closed... | | can somebody please explain?? thanks. | | tcp4 0 0 server.3484 zagreb.hr.eu.und.ircd | ESTABLISHED | tcp4 0 0 server.2143 free.tyranz.com.ircd | ESTABLISHED Are you running any kind of irc client? The output means: There are 2 connections, one on port 3484, and another on 2143 connected to zagreb.hr.eu.und and free.tyranz.com on the port for ircd, port 6667. Some trojens use irc channels for control, might look into that. -- Bob Bomar [EMAIL PROTECTED] http://www.bomar.us/~bob ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED] Output from gpg gpg: Signature made Tue Jun 7 22:24:55 2005 CDT using DSA key ID 3AED74AA gpg: Can't check signature: public key not found ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
Re: ircd
Are you running any kind of irc client? not that i'm aware of there are no processes that i can see in the ps output that reminds of an irc client... portmap? The output means: There are 2 connections, one on port 3484, and another on 2143 connected to zagreb.hr.eu.und and free.tyranz.com on the port for ircd, port 6667. thanks... i was aware of that Some trojens use irc channels for control, might look into that. like which? chkrootkit didn't come up with anything... thanks... - -- Bob Bomar [EMAIL PROTECTED] http://www.bomar.us/~bob -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.4 (Darwin) Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org iD8DBQFCpmUH9Jm/aTrtdKoRArViAJ4pU6PUuUXD/Hu0yR03/SqwaYi9ewCgop6K WZz26GJmYJSl/FpbquE0hh4= =Yqid -END PGP SIGNATURE- -- -- In a world without walls or fences, who needs Windows and Gates? ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
Re: ircd
i did run chkrootkit before writing this... nothing. and nothing on nmap about those ports!?! thanks... # chkrootkit -V chkrootkit version 0.44 I concur. You might also want to run chkrootkit (security/chkrootkit) to see if you've been 0wned so to speak. On Tue, 7 Jun 2005, Bob Bomar wrote: kalin mintchev wrote: | | hi all... | | i found this 2 lines in the netstat output on one of my machines. we are | not running ircd and according to nmap ports 3483 and 2143 are closed... | | can somebody please explain?? thanks. | | tcp4 0 0 server.3484 zagreb.hr.eu.und.ircd | ESTABLISHED | tcp4 0 0 server.2143 free.tyranz.com.ircd | ESTABLISHED Are you running any kind of irc client? The output means: There are 2 connections, one on port 3484, and another on 2143 connected to zagreb.hr.eu.und and free.tyranz.com on the port for ircd, port 6667. Some trojens use irc channels for control, might look into that. -- Bob Bomar [EMAIL PROTECTED] http://www.bomar.us/~bob ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED] Output from gpg gpg: Signature made Tue Jun 7 22:24:55 2005 CDT using DSA key ID 3AED74AA gpg: Can't check signature: public key not found -- -- In a world without walls or fences, who needs Windows and Gates? ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
Re: ircd recommendations?
On Sunday 18 January 2004 08:08 pm, Andrew L. Gould wrote: The port for ircd-hybrid is marked as broken. Does anyone have any recommendations regarding other irc servers? I have a server running Unreal 3.2 IRCd. You can download it at www.xnet.org and find the link for software and downloads. They also have sources for services. Unreal3.2 supports SSL, too. So it's a tiny bit more secure. HTH -- Eric F Crist AdTech Integrated Systems, Inc (612) 998-3588 pgp0.pgp Description: signature
Re: ircd recommendations?
On Sunday 18 January 2004 09:48 pm, Eric F Crist wrote: On Sunday 18 January 2004 08:08 pm, Andrew L. Gould wrote: The port for ircd-hybrid is marked as broken. Does anyone have any recommendations regarding other irc servers? I have a server running Unreal 3.2 IRCd. You can download it at www.xnet.org and find the link for software and downloads. They also have sources for services. Unreal3.2 supports SSL, too. So it's a tiny bit more secure. HTH I'll check it out. Thanks, Andrew Gould ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
Re: ircd recommendations?
On Sunday 18 January 2004 10:12 pm, Andrew L. Gould wrote: I'll check it out. If you need help configuring it, let me know. If you've configured IRCd's before, they've really changed the config file in this version. If you use services, you're going to have to setup a server link between ircservices and ircd, even though they're on the same computer. -- Eric F Crist AdTech Integrated Systems, Inc (612) 998-3588 pgp0.pgp Description: signature
Re: ircd
Hello Andrew, One of the most common and best ircd I ever used is bahamut. There is a complete Tutorial for everything. Basiclly this ircd has been created to serve DALnet IRC network but no harm and its perfect if you run it as a standalone network. Please check: http://bahamut.dal.net/ About controling number of users, connections, ports, etc usually its made from the ircd configuration it self. and small configuration to the box it self if needed. Also you could search in google for irc service to download and connect. Maybe you would check http://board.ircd.cc/ for links and recruitment Marwan Sultan. Former DALnet Admin. --- I'd like to experiment with an irc server. The irc server will not be configured to connect to other irc servers. (In fact, I'd like to make it local to the server and have the small number of users use ssh and a local connection.) The port for ircd-hybrid is marked as broken. Does anyone have any recommendations regarding other irc servers? Andrew Gould ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
Re: ircd
On Sunday 18 January 2004 07:36 pm, Marwan Sultan wrote: Hello Andrew, One of the most common and best ircd I ever used is bahamut. There is a complete Tutorial for everything. I've used this server before, as well. This is a very good one. I spoke of Unreal IRCd because that's what I use now... Basiclly this ircd has been created to serve DALnet IRC network but no harm and its perfect if you run it as a standalone network. Please check: http://bahamut.dal.net/ About controling number of users, connections, ports, etc usually its made from the ircd configuration it self. and small configuration to the box it self if needed. These are standard features of most ircds. These can all be changed at any time from the ircd.conf file. Rereading this file is simply a /rehash command from irc (as an oper) or a sighup to the process on the box itself. Also you could search in google for irc service to download and connect. Maybe you would check http://board.ircd.cc/ for links and recruitment Marwan Sultan. Former DALnet Admin. Take a look around. There are many, many ircds out there. These have just been two. I've been bored lately, so I could use something to do if you need help. ;) Have fun! -- Eric F Crist AdTech Integrated Systems, Inc (612) 998-3588 pgp0.pgp Description: signature
Re: ircd and dns
Hi! hi, i would like to know how ircd check for dns ? i have this error Couldn't resolve your hostname; using your IP address instead but if i try to nslookup all is good it s only with ircd anyone has already had this matter and solve it? How do you use nslookup? If nslookup 'yourhost.yourdomain.com' gives IP address 12.34.56.78, then that's only half of what's needed. 'nslookup 12.34.56.78' must also give 'yourhost.yourdomain.com' (ideally) or at least *some* domain name. BTW, 'nslookup' is deprecated, 'host' and/or 'dig' is recommended instead. But that doesn't help you with your problem. -- Toomas Aas | [EMAIL PROTECTED] | http://www.raad.tartu.ee/~toomas/ * How much net work could a network work, if a network could net work? To Unsubscribe: send mail to [EMAIL PROTECTED] with unsubscribe freebsd-questions in the body of the message
