- main - earth.li

Another Linux virus...
by Ricardo Campos 08 Jan '02

08 Jan '02

I guess it's best not to try and use an exploit whose code you don't understand.... http://www.vnunet.com/News/1127965 I wonder how long it will take for someone to engineer a more aggressive virus? (In the sense of self-propagating) _______________________________________________ "There are several codes, and I know several of them." -Mr. Precise. http://www.rscampos.net Check my online diary out: http://www.rscampos.net/blog.html -- Get your free email from www.linuxmail.org Powered by Outblaze

2 1

Re: [Alug] Next Meeting - Jan 27?
by MJ Ray 07 Jan '02

07 Jan '02

Simon: [...] > > Why on earth would anyone want to download 600Mb and only use around 200Mb > > of it? > > So, the answer's simple: use Debian! ;-) > I agree with your comments, but..... Sounds lame, but I'd rather have the > full distro (maybe I'm odd) that way I can get all the extra goodies, bits > and pieces that come along.. Fair enough most of them will never see the > light of day... But I just gotta have em.... How does not having the ones you don't want downloaded stop you getting the ones you do? New goodies (including ones from alternative suppliers) are only ever an apt away. > Anyway I've got to stick with RedHat, company policy etc... Company policy prevents you using better tools for the job? Time to look for a new company... ;^) > P.S. Does anyone know how to get the spell checker working with KMail ? Nope... I'm just going to try to get it working in this email client. Thanks for the idea! -- MJR

2 1

Re: [Alug] Next Meeting - Jan 27?
by MJ Ray 07 Jan '02

07 Jan '02

Simon: > The idea (and reason) is I downloaded the RedHat 7.2 ISO's down an ISDN line > and it took 3 days (including 2 disconnects that I didn't pick up on)... Yes, getting some shared ISOs is probably useful, although I wish more distributions would follow Debian's lead of starting PPP network installations from nothing more than a few floppies and some hard disk files. They're taking it even further in the next version and letting you download the hard disk files after the installation has started, I believe. Why on earth would anyone want to download 600Mb and only use around 200Mb of it? So, the answer's simple: use Debian! ;-) -- MJR

2 1

Re: [Alug] Weekly IRC reminder
by MJ Ray 07 Jan '02

07 Jan '02

> Which UK network(s) would you suggest? We are currently 2 for, 1 neutral I think. Therefore: Tonight's IRC meeting will be at 8pm on penguin.blitzed.org #alug (or try irc.blitzed.org if that doesn't work) as a trial. The rest of the details are the same, except: ,---- TONIGHT 8pm --------. | irc.blitzed.org #alug | `-------------------------' Point out any irony to me only by email off-list, please. -- MJR

1 0

Re: [Alug] Next Meeting - Jan 27?
by Jenny_Hopkins＠toby-churchill.com 07 Jan '02

07 Jan '02

MJRay wrote: >"As to the software library: do you mean that, or would a software directory on the web site be more useful? While the lending library is good (although David seems to have gone away with it?), some of us do not want to fund proprietary software products." That was Simon mentioned that. Not sure what he has in mind? As for the lending library david has run off with - I could trade him a vax for it back. :-) and >"It's not dropped. I'm still on the case." I kind of meant the support side from alug members. I feel a personal responsibility for not offering support, enthusiasm and help, but it may be a female thing ;-) (Jo?) Jen.

1 0

Re: [Alug] Nessus and Nmap
by Ricardo Campos 07 Jan '02

07 Jan '02

> You need to have nmap installed too, have you? > Mike Yeah, that was my first step. I used a bastille-linux hardnening script recently, I'm wondering if that has somehow interfered the nessusd server. However, it was set to the lowest reccommended for someone on the 'net, rather than paranoia level. The man pages for nmap, if anyone who's been following this thread *hasn't* read them, are amazing. I actually understand them! lol. But then TCP/IP is the only computer stuff I've had formal training in (other than Louts Notes and Windows NT). REALLY, if you are thinking of any firewalling (iptables or ipchains or just in general) READ the nmap manual. Believe me! ;) >of scan I can run is tcp connect() scan... I kinda thought the point of nessusd was that it ran as root so the others are possible. > > > > Do you think this is just a symptom of scanning the loopback address? > > I guess from the response on-list that I'll get a chance to see if it *is* a symptom of loopback. ;) "There are several codes, and I know several of them." -Mr. Precise. http://www.rscampos.net -- Get your free email from www.linuxmail.org Powered by Outblaze

1 0

Re: [Alug] Nessus
by Jenny_Hopkins＠toby-churchill.com 07 Jan '02

07 Jan '02

Ricardo wrote: >Anyways, I'll be on IRC tonight, so if anyone wants to use up some of their CPU scanning my IP (nick: ConfuZed), >feel free to do so, as long as you send me the report! ;) Ricardo, - I too have been setting up ipchains and wondering if they do what i think they do over the last few weeks. I'll be grateful if anyone can try the same on my box tonight. Would the way to go about it to be to declare the IP (dynamically assigned) on the IRC session and award a prize to the first person to get in, or is that, erm, uncool? Jenny.

2 1

Re: [Alug] Nessus
by Ricardo Campos 07 Jan '02

07 Jan '02

>Would the way to go about it to be to > declare the IP (dynamically assigned) on the IRC session and award a prize > to the first person to get in, or is that, erm, uncool? > Jenny. LOL Well, I guess it's gonna be a free-for-all tonight! Nessus produces reports in HTML, so we can get proper feedback prolly best we get one person scanning one person rather than 5 people scanning one poor fella (or lass as the case may be) We'll work it out on IRC.... ricardo -- Get your free email from www.linuxmail.org Powered by Outblaze

1 0

Re: [Alug] Weekly IRC reminder
by MJ Ray 07 Jan '02

07 Jan '02

> The meeting takes place on the irc server irc.openprojects.net in the > #alug channel, you can take a look at www.openprojects.net to get more > info on the openprojects network. I'm thinking that maybe we should move to a UK network, as OPN still only has one usable UK server and is developing in strange ways[1]. Anyone have strong feelings on this? [1] - For people who know about IRC: abolishing O-lines, disabling some useful commands, kicks that look like you did a /part, 4 million americans and thousands of brits banned from their help channel and many more. -- MJR

3 2

Nessus
by Ricardo Campos 07 Jan '02

07 Jan '02

OK, so I've been playing around with that lovely security program Nessus (http://nessus.lug.org.uk/) scanning both my eth0 and pp0- for some reason the only kind of scan I can run is tcp connect() scan... I kinda thought the point of nessusd was that it ran as root so the others are possible. Do you think this is just a symptom of scanning the loopback address? Anyways, I'll be on IRC tonight, so if anyone wants to use up some of their CPU scanning my IP (nick: ConfuZed), feel free to do so, as long as you send me the report! ;) Ricardo "There are several codes, and I know several of them." -Mr. Precise. http://www.rscampos.net -- Get your free email from www.linuxmail.org Powered by Outblaze

1 0