Re: [SLUG] Linux Slapper Worm

2002-09-18 Thread Peter Rundle
Have him contact his ISP and ask them to block udp port 2002 at their end. Yeah tried that they weren't very helpful, apparently they can't block udp to a single IP (I know that they can, I guess they don't want to). But anyway the bugtraq was the key, removing apache now. Thanks Pete --

Re: [SLUG] Linux Slapper Worm

2002-09-18 Thread Peter Rundle
Thanks guys things are back under control now, however I see these two row from netstat -an. Anybody know what they are or how to map which processes are bound to which ports? udp0 0 0.0.0.0:10240.0.0.0:* udp0 0 0.0.0.0:10250.0.0.0:*

Re[2]: [SLUG] Linux Slapper Worm

2002-09-18 Thread evilbunny
Hello Peter, netstat -anp -- Best regards, evilbunnymailto:[EMAIL PROTECTED] http://www.SydneyWireless.com - Exercise your communications freedom to make it do what you never thought possible... Wednesday, September 18, 2002, 4:51:22 PM, you wrote: PR Thanks

[SLUG] Switching Interfaces on network cards

2002-09-18 Thread scott
Hi all, I am a new Debian user (very impressed so far), but an old (3 years is oldish?) redhat user. The only problem I have come across so far is I can't switch make the gigabit eth0 and the 100mbit eth1. The 100mbit driver is built into the kernel while the gigabit is a module. I have tried

[SLUG] Be smart about your server! [Was: Linux Slapper Worm]

2002-09-18 Thread Jeff Waugh
quote who=Tim White Reports indicate that the Apache/mod_ssl worm's source code is placed in /tmp/.bugtraq.c on infected systems. It is compiled with gcc, resulting in the executable binary being stored at /tmp/.bugtraq; therefore, presence of any of the following

[SLUG] Xandros Review at OSNews

2002-09-18 Thread Paul Copeland
Hi All, Always on the prowl for the perfect desktop distribution, I have often read great things about the coming of Xandros (the replacement for Corel Linux). For those interested OSNews (a great site) (www.osnews.com) has a review and screenshots of the Xandros Desktop Beta 3 at the

Re: [SLUG] Linux Slapper Worm

2002-09-18 Thread Howard Lowndes
On Wed, 18 Sep 2002, Tim White wrote: To quote from the CERT advisory CA-2002-27 http://www.cert.org/advisories/CA-2002-27.html: Identifying infected hosts Reports indicate that the Apache/mod_ssl worm's source code is placed in /tmp/.bugtraq.c on infected systems. It is

[SLUG] DosEmu Protel Trax

2002-09-18 Thread Amanda Wynne
Just wanted to say I've got it going (finally). I haven't got the mouse sorted yet, but I'm working on it. Next milestone: Goodbye Windoze. Amanda -- SLUG - Sydney Linux User's Group - http://slug.org.au/ More Info: http://lists.slug.org.au/listinfo/slug

Re: [SLUG] Linux Slapper Worm

2002-09-18 Thread Howard Lowndes
On Wed, 18 Sep 2002, Tim White wrote: To quote from the CERT advisory CA-2002-27 http://www.cert.org/advisories/CA-2002-27.html: Identifying infected hosts Reports indicate that the Apache/mod_ssl worm's source code is placed in /tmp/.bugtraq.c on infected systems. It is

Re: [SLUG] Be smart about your server! [Was: Linux Slapper Worm]

2002-09-18 Thread Howard Lowndes
Jeff raises a good point here, but just what is le minimum that you can put on a public server and still expect it to run. I'm thinking RH here not Deb (and I don't want a war between the two camps) On Wed, 18 Sep 2002, Jeff Waugh wrote: I've taken a bit of stick every now and then for

[SLUG] Distro Hangups Be smart about your server! [Was: Linux Slapper Worm]

2002-09-18 Thread Jeff Waugh
quote who=Howard Lowndes Jeff raises a good point here, but just what is le minimum that you can put on a public server and still expect it to run. My basic installs generally round off at about 200MB for a pure webserver or mailserver. You can do better by building your own, but then you

Re: [SLUG] Linux Slapper Worm

2002-09-18 Thread Rev Simon Rumble
On Wed 18 Sep, Peter Rundle bloviated thus: Yeah tried that they weren't very helpful, apparently they can't block udp to a single IP (I know that they can, I guess they don't want to). In that case, I would send them a fax requesting a block on port 2002 so that it's in writing. Then track

[SLUG] Conflict resolution when tracking Debian SID

2002-09-18 Thread Ken Caldwell
This evening when trying to upgrade this box I ran into a dependency problem. Apt-get dselect-upgrade cannot upgrade fileutils, shellutils or textutils because to do so it must first install the new package coreutils. coreutils conflicts with stat which is provided by the old fileutils.

Re: [SLUG] Be smart about your server! [Was: Linux Slapper Worm]

2002-09-18 Thread Craige McWhirter
On Wed, 2002-09-18 at 19:18, Howard Lowndes wrote: Jeff raises a good point here, but just what is le minimum that you can put on a public server and still expect it to run. I'm thinking RH here not Deb (and I don't want a war between the two camps) How long is piece of string? I really

Re: [SLUG] Switching Interfaces on network cards

2002-09-18 Thread Craige McWhirter
On Wed, 2002-09-18 at 16:57, [EMAIL PROTECTED] wrote: The 100mbit driver is built into the kernel while the gigabit is a module. I have tried adding a line into modules.conf stating: alias eth0 e1000 but when I bring the interfaces up it still ties the 100mbit to eth0 and fails on eth1,

[SLUG] one way ping

2002-09-18 Thread Bill Taylor
hi all, I have at this moment 2 boxes on the net via a server/gateway, (3rd box) before I came on line I tried to ping from one box to the other. works fine, one way only. they identify each other ,by name and ip, everything looks the same in the printout, but no losses one way, 100% the other.

Re: [SLUG] Cheap network cards?

2002-09-18 Thread Steve Kowalik
At 7:20 pm, Wednesday, September 18 2002, David Fitch mumbled: Those of you with intel cards (eepro100 driver) might want to try the e100 driver instead. It's only available as a module from intel's website but it works a lot better than the eepro100. We had a bunch of intel rack machines

[SLUG] Next Activity for MacLUG/Macarthur Wireless

2002-09-18 Thread Terry Collins
Just a reminder that the next activity day is this Saturday http://www.woa.com.au/maclug/meetings/2002/meet2002-09-21.html Longer Distance testing of 802.11b wireless antenna Base Station at Centenary Park (Node1179) (UBD 346 P5) First link to woodbine (Enmore Trig, Node 1200) (UBD 326 K15)

Re: [SLUG] Conflict resolution when tracking Debian SID

2002-09-18 Thread Steve Kowalik
At 9:41 pm, Wednesday, September 18 2002, Ken Caldwell mumbled: Apt-get dselect-upgrade cannot upgrade fileutils, shellutils or textutils because to do so it must first install the new package coreutils. coreutils conflicts with stat which is provided by the old fileutils. coreutils

Re: [SLUG] Switching Interfaces on network cards

2002-09-18 Thread scott
[EMAIL PROTECTED] wrote on 18/09/2002 09:41:16 PM: Scott, have you tried using the programme modconf to load the gigabit driver? If not, give it a run and if it still fails you can punt the error into an email for us to have a squiz at :) Craige, The gigabit works if I alias eth1 to

Re: [SLUG] Switching Interfaces on network cards

2002-09-18 Thread Jeff Waugh
quote who=[EMAIL PROTECTED] The only problem I have come across so far is I can't switch make the gigabit eth0 and the 100mbit eth1. The 100mbit driver is built into the kernel while the gigabit is a module. That's your problem. If they were both modules, you could just load them in the

Re: [SLUG] Cheap network cards?

2002-09-18 Thread Jon Biddell
At 18/09/2002 22:17, Steve Kowalik wrote: At 7:20 pm, Wednesday, September 18 2002, David Fitch mumbled: Those of you with intel cards (eepro100 driver) might want to try the e100 driver instead. It's only available as a module from intel's website but it works a lot better than the

Re: [SLUG] Managing a large network

2002-09-18 Thread Richard Neal
Actually dont just look at the network to carry data but also voice, CISCO now also allows you to integrate VoIP on the same network ie voice,voice mail,SMS and their are CISCO digital telephones (there are actually other companies making telephones for CISCO's VoIP network now).If you think a

Re: [SLUG] Switching Interfaces on network cards

2002-09-18 Thread Craige McWhirter
On Wed, 2002-09-18 at 21:34, [EMAIL PROTECTED] wrote: When I alias the gigabit to be eth0 in modules.conf, the 100mb is still used as eth0, but I want it to be eth1. Is there any config file I need to modify? I think Jeff hit the nail on the head, if you make both cards modules, you may

[SLUG] TLS and Apache-SSL

2002-09-18 Thread evilbunny
Hello slug, Does anyone know if it's possible to do multihost/single IP hosting via Apache-SSL yet (ie TLS) if so how? Or do I need to install mod_ssl to achieve this? -- Best regards, evilbunny mailto:[EMAIL PROTECTED] smime.p7s Description: S/MIME

Re: [SLUG] one way ping

2002-09-18 Thread Bill Taylor
Patrick Kelso wrote: Is the box that doesnt return the pings running a firewall? Patrick no it's not (just checked), relying on the server firewall to keep things kleen. they are explicitly allowed to talk in /etc/hosts.allow as well. bill -- SLUG - Sydney Linux User's Group -

Re: [SLUG] TLS and Apache-SSL

2002-09-18 Thread Jeff Waugh
quote who=evilbunny Does anyone know if it's possible to do multihost/single IP hosting via Apache-SSL yet (ie TLS) if so how? Or do I need to install mod_ssl to achieve this? You can't with either, because the ssl stuff is done at the IP connection level, not the http Host: header

Re: [SLUG] Switching Interfaces on network cards

2002-09-18 Thread Tom Massey
* Scott [2002-09-18 22:33]: The gigabit works if I alias eth1 to e1000 in modules.conf. what seems to be the problem, If I can explain better (I have never been good at explaining problems in emails) What I want is the gigabit to be eth0, and the 100mbit to be eth1. You could perhaps try

Re: [SLUG] Cheap network cards?

2002-09-18 Thread David Fitch
On Wed, 2002-09-18 at 22:09, Jon Biddell wrote: Do you know if this e100 driver will allow the card into full duplex mode ? My server has been running at 100/half for so long, I've forgotten what speed it like yes it has lots of options and when the module is loaded it displays a summary

Re[2]: [SLUG] TLS and Apache-SSL

2002-09-18 Thread evilbunny
Hello Jeff, This is why they invented TLS, it does plain text handshaking to work out the nuts and bolts, then switches to crypto... SSLv3 may require a single IP per host, TLS doesn't, however implementation is another matter... -- Best regards, evilbunny

[SLUG] Initial installation suse 8.0

2002-09-18 Thread Juan A Aranibar
Hi to all, H E L P ! ! ! ! ! I have installed Linux Suse 8.0 on my laptop IBM ThinkPad 390E after DOS and Windows NT 4.0 on a second HD, and I'm happy with what I can see, unfortunately I can not configured my modem / Internet. Is there anywhere, or were I can get some help!! an

Re: [SLUG] TLS and Apache-SSL

2002-09-18 Thread Jeff Waugh
quote who=evilbunny This is why they invented TLS, it does plain text handshaking to work out the nuts and bolts, then switches to crypto... SSLv3 may require a single IP per host, TLS doesn't, however implementation is another matter... Sure, though I haven't seen anyone using TLS on

Re: [SLUG] Initial installation suse 8.0

2002-09-18 Thread Tom Massey
* Juan A Aranibar [EMAIL PROTECTED] [2002-09-18 23:09]: I have installed Linux Suse 8.0 on my laptop IBM ThinkPad 390E after DOS and Windows NT 4.0 on a second HD, and I'm happy with what I can see, unfortunately I can not configured my modem / Internet. Is there anywhere, or were I can get

[SLUG] Next SLUG Meeting - Friday 27th September, 2002

2002-09-18 Thread Jan Schmidt
Monthly Meeting for September When: Friday, September 27, 6:30pm - 9:30pm Where: UTS Broadway NOTE: The rooms for this month have not yet been finalised - we will post a followup as soon as they are sorted out Plan: * The Usual Suspects - Starts 6:30pm + QA - What has

Re: [SLUG] Initial installation suse 8.0

2002-09-18 Thread Richard Neal
If its an internal win-modem you have a 50/50 chance of getting it working try http://www.linmodems.org On Wed, 2002-09-18 at 23:16, Juan A Aranibar wrote: Hi to all, H E L P ! ! ! ! ! I have installed Linux Suse 8.0 on my laptop IBM ThinkPad 390E after DOS and Windows NT 4.0 on a second

Re: [SLUG] TLS and Apache-SSL

2002-09-18 Thread Robert Collins
On Wed, 2002-09-18 at 23:20, Jeff Waugh wrote: quote who=evilbunny This is why they invented TLS, it does plain text handshaking to work out the nuts and bolts, then switches to crypto... SSLv3 may require a single IP per host, TLS doesn't, however implementation is another

Re: [SLUG] Linux Slapper Worm

2002-09-18 Thread kevin
Redhat's, the same with Mandrake standard naming convention does not follow openssl's versioning. Just check to see if you have the latest version of openssl. I think you need version 0.96.g Sluggers, I have a friend who's network connection is being hammered by UDP inbound requests on

Re: [SLUG] DosEmu Protel Trax

2002-09-18 Thread Amanda Wynne
OK. Read the Dosemu Howto. Installed Dosemu Freedos from MDK8.2 rpm's. At this point, after re-reading the how-to several more times, I could do a dir, copy stuff to/from floppy. Trying to run any program which had graphics output caused the whole system to go bye-byes. Figured I had a problem

Re: [SLUG] Linux Slapper Worm

2002-09-18 Thread Brian Robson
At 03:53 PM 18/09/02 +1000, you wrote: Sluggers, The Slapper worm is described here, including the files to be removed... http://www.LinuxWorld.com.au/news.php3?tid=1nid=1842enotify=1 Brian. -- SLUG - Sydney Linux User's Group - http://slug.org.au/ More Info:

Re: [SLUG] Cheap network cards?

2002-09-18 Thread rod
Most of the embedded applications with on-board ethernet use the RTL8139. If they're such a cpu hog, how come they work fine with 8 bit micros ?? Amanda If I remember correctly there is a DMA buffer alignment issue under linux that gives them their bad wrap.

OT: many PCB designers here? Was Re: [SLUG] DosEmu Protel

2002-09-18 Thread rod
Hi all, from the posts recently there seems to be a few PCb designers on this. Anyone up for some occasional PCB contracting? Apologies for this being off topic. -RodT Just wanted to say I've got it going (finally). I haven't got the mouse sorted yet, but I'm working on it. Next

[SLUG] handling intrustive logon attempts

2002-09-18 Thread Anthony Gray
Hi All, I am wanting to get some opinions on the best way to handle intrusive logon attempts. I know that 'Authentication' problems are stored in /var/log/messages, are there any tools that can report on failed logon attempts? I thought of writing a script to analyse the log file and email

[SLUG] How many ethernet port can Linux handle.

2002-09-18 Thread Richard Hayes
Dear list, Currently I use a motherboard with 6 slots and using DLINK DFE- 580 (4 ports) I can get 24 ports on the box. (It is a router / firewall) I have read there are industrial PC with upto 18 PCI slots therefore I could have upto 72 ports. At what point does Linux fail? Has anyone got

Re: [SLUG] How many ethernet port can Linux handle.

2002-09-18 Thread Gareth Walters
- Original Message - From: Richard Hayes [EMAIL PROTECTED] To: [EMAIL PROTECTED] Any recommends where to purchase? I am not sure if they have exactly what you are after but here is their URL http://www.ieci.com.au/ I spoke to them about a year ago in regards to some rack systems

Re: [SLUG] handling intrustive logon attempts

2002-09-18 Thread Howard Lowndes
On Thu, 19 Sep 2002, Anthony Gray wrote: Hi All, I am wanting to get some opinions on the best way to handle intrusive logon attempts. I know that 'Authentication' problems are stored in /var/log/messages, are there any tools that can report on failed logon attempts? I thought of writing

[SLUG] Network Monitoring - TOP Talkers - Open Source?

2002-09-18 Thread Stuart
What is a TOP Talker and do they exists in the Open Source world? Not bumped into any at Freshmeat.net. Google only mentions proprietary ones. Is this an ethereal type of product? Any ideas? Stuart -- SLUG - Sydney Linux User's Group - http://slug.org.au/ More Info:

RE: [SLUG] Network Monitoring - TOP Talkers - Open Source?

2002-09-18 Thread Visser, Martin (Sydney)
Ethereal can be used for this however it really is a packet sniffer. The best solutions, and a very good one, is NTOP http://www.ntop.org Martin Visser Network Consultant Technology Infrastructure - Consulting Integration COMPAQ, part of the new HP 3 Richardson Place North Ryde, Sydney NSW

[SLUG] Setting console to 80col x 50line mode...

2002-09-18 Thread Brendan Dacre
Gentlepeople, I am having some difficulty setting my console into 80x50 text mode. I have tried this on RH7.1 (2 different PCs, kernel 2.4.6) and Debain Woody (1 PC, kernel 2.2.20). (Incidentally, the Debian system has defaulted to some sort of 30 line mode but I don't remember requesting

RE: [SLUG] Setting console to 80col x 50line mode...

2002-09-18 Thread Wienand Ian
Before you rush in and answer, be aware that I have (to some extent RTFM) and have tried adding a line to my lilo.conf (vga=ask, vga=enhanced) neither of which did anything. Did you re-run lilo after putting these extra commands in (e.g. from the command prompt as root type 'lilo')? vga=ask

Alternative to AutoTrax/Protel, was Re: [SLUG] dosemu; help needed

2002-09-18 Thread Michael Lake
Amanda Wynne wrote: I've got dosemu itself going. Exitemu works fine. I can dir, copy to/from floppy (painfully slowly). But I can't get anything worthwhile working. Protel Trax just goes into a black hole. Nothing. .. All help appreciated as I can't kill off windows till I get

Alternative to AutoTrax/Protel, was Re: [SLUG] dosemu; help needed

2002-09-18 Thread Michael Lake
Amanda Wynne wrote: I've got dosemu itself going. Exitemu works fine. I can dir, copy to/from floppy (painfully slowly). But I can't get anything worthwhile working. Protel Trax just goes into a black hole. Nothing. .. All help appreciated as I can't kill off windows till I get

Re: [SLUG] Setting console to 80col x 50line mode...

2002-09-18 Thread Brendan Dacre
Ian, Thanks, I needed to run lilo after editing /etc/lilo.conf, I am a goose after all. It was simple and now my vga=enhanced works... sort of. I now get the behaviour I described on my Mandrake system, i.e. it starts booting in 50 line mode, then part way through the booting, it resets to