main

main@lists.alug.org.uk

10368 discussions

New Linux Varus
by Kerin 28 Feb '01

28 Feb '01

Hi I,m not realy sure who to send this too, I,ve just picked up the new issue of the "new Linux Magazine". and theres an article in there worth reading, as follows, Page 7 VARUS WARNING A new Internet worm that targets computers running Red Hat Linux is be described by some virus experts as the first successful attack on the Linux O/S, which is widely considered to be one of the best protected platforms around. To penetrate computers that have Red Hat Linux 6.2 or 7.0 installed, The Ramen worm exploits 3 security breeches loopholes - in.ftpd, rc.statd and PLRng. These were identified and closed by developers last summer. The breaches are from the buffer overflow category and could enable hackers to send an executable code to the remote system and run it without the user's authorisation. The Ramen worm infects a system by sending data to a target computer receives data which then overflows the system's internal buffer. This enables the worm code to gain root privileges. It then initialises the command processor that executes the worm's instructions. Next the worm creates the /usr/srcl.poop folder and launches the "lynx" internet browser. There it downloads theworm's archive RAMEN.TGZ from a remote system. After this, Ramen opens the archive and executes its main file START.SH. The worm changes the contents of INDEX.HTML files found on the system, so that when affected HTML files are run they display the following message. RameN Crew Hackers looooooOOOOOOOOOOOve noodles. There is no additional payload. But i have run out of time to finnish the article. Cheers Kerin

2 1

Re: [Alug] [Alasdair Kergon <agk@ukuug.org>] [lugmaster] Internet Fiesta 2nd to 4th March 2001
by MJ Ray 27 Feb '01

27 Feb '01

Apologies for that unwarranted MIMEing. I'll learn how to use my mail client properly one day soon. It also seems my filters don't catch all attachments yet, so I'll sharpen them. -- MJR

1 0

Re: [Alug] I hope this isn't inappropriate...
by MJ Ray 27 Feb '01

27 Feb '01

Adam Bower <abower(a)zeus.com> writes: > How about we only allow posts about jobs from active members of the > list? or to be forwarded by list subscribers for friends, friendly > companys etc. and maybe we need a similar policy for adverts?? You might like that, but I can see the reason why. No, if someone crosses the boundaries of normal good behaviour I'll block them, but I don't want to have to moderate this list yet. After all, there are only 120 people on it at the moment. If we get many more of these, then I'll consider changing policy if people want to. Thoughts? Anyway, back to the Linux with some helpful advice from http://www.chiark.greenend.org.uk/~sgtatham/bugs.html -- MJR

2 1

[Alasdair Kergon <agk@ukuug.org>] [lugmaster] Internet Fiesta 2nd to 4th March 2001
by MJ Ray 27 Feb '01

27 Feb '01

Time for some ALUG networked event? Date: Tue, 27 Feb 2001 13:47:09 +0000 From: Alasdair Kergon <agk(a)ukuug.org> Subject: [lugmaster] Internet Fiesta 2nd to 4th March 2001 I hadn't heard of this until I read this email this morning. Alasdair ----- Forwarded message from Christian de Larrinaga <cdel(a)firsthand.net> ----- Date: Mon, 26 Feb 2001 22:22:28 -0000 From: "Christian de Larrinaga" <cdel(a)firsthand.net> Subject: Invitation to participate in the Internet Fiesta 2nd to 4th March 2001 Your invitation to take part in the worldwide Internet Fiesta 2001. Don't forget to register so people know your taking part. best regards, Christian Christian de Larrinaga Internet Fiesta UK 2001 2nd 4th March 2001 www.internet-fiesta.org +44-(0)1380-816877 Internet Society of England Please forward widely and as appropriate ---------------------------------------------------------- Internet Fiesta- is the world's greatest Internet event and it is coming early this year on the weekend 2nd to 4th March Fiesta weekend is a celebration of the power of the Internet and it is your opportunity to communicate across the world by creating and registering your own special part of this festival of the Internet, participating in thousands of activities with millions of Internet users around the world, in a weekend of fun, culture, interactivity and experiential learning that gets the world buzzing by Internet. Fiesta is an ideal way to find and promote what is happening on the Internet today. What you can do is limited only by the imagination. Nothing is too small to register. Often the simplest ideas have the greatest impact on the Internet .. Try it. So whilst you take a virtual weekend in Paris, you can be greeting new friends in Japan. The Internet Fiesta 2001 is just for a weekend of the 2nd to 4th March 2001. Anybody can participate. Dream up an idea, plan what you will do to make it happen and register it at http://www.internet-fiesta.org/Faq.htm and then get on the net for the weekend.. If you are already holding an event, a concert or a cultural or scientific festival or a course teaching skills or want to demonstrate something new, make sure you connect up and share it with the whole world. Remember the Fiesta is the ideal opportunity to bring people to your project and community and for you to extend what you do to a worldwide community over a single weekend of Internet activities. So learn, teach, watch, film, show, demonstrate, play, talk, webcast, chat, invent, discuss, build, and above all have fun and take possession. The Internet is yours. Fiesta is a weekend of fun, but with a serious intent of getting people to enjoy and use the Internet as a resource for everyone and discover what's new and interesting.. Make sure you take part - register your event. PLEASE NOTE I am also looking for helpers and local co co-ordinators to assist with events and help event organisers. Please register by email to me cdel(a)firsthand.net best regards Christian de Larrinaga Internet Fiesta UK 2001 2nd 4th March 2001 www.internet-fiesta.org +44-(0)1380-816877 cdel(a)firsthand.net Chairman Internet Society of England www.england.isoc.org some background information from Raymond Pougheon of Atelier in Paris a creator of "Fete d'Internet" - The Internet Fiesta. INTERNET FIESTA 2001 Internet Fiesta ? The Internet Fiesta originated in France. Founded on the model of the " music fest ", the first " Internet Fest " was organised in France in 1998. In 1999, with the help of the European Commission, the Fiesta spread out over the world.. In 2000, for it's second edition, the Internet Fiesta organised itself around 65 committees in more than 50 countries over the five continents. A very large amount of events all over the world were organised : Africa, Eastern and Western Europe, South America, but also Canada Corea I order to facilitate the national organisors' work a cordination team of about 50 volunteers edited information in 15 different languages, pages and ressouces on numerous formats such as 3D, linux, flash, Java, webcamsand a database for the events in 10 languages was also accessible for wap phones. Different prize games where organised such as a quiz, a 3D drawing contest or the " fabrique des possibles " wich enabled anybody to conceive new usages tools or scenarios for the Future Internet. Fiesta Plaz was the place where the coordination team physically met 24 hours a day during the event. Everybody, presenting himself as a Fiestoon, the Internet Fiesta mascot, and speaking in one of the 15 languages, participated to the online events all over the world and in very different time zones. Objectifs ? The Internet Fiesta's tries to promote the utilisation of Internet in order to facilitate communication between people. The Internet is boarderless, participants come from the five continents. The goal is to encourage and facilitate daily usage of the Internet and to share experiences and projects with the help of networks be they physical or human. Date ? The Internet Fiesta is a three days international event. This year it will take place from 2nd to 4th of March 2001. Contacts ? There is no centralised organisation but a network of volunteers who : - help to integrate the project and events into the network - organise events and actions in order to promote Internet Fiesta The International website : www.internet-fiesta.org - organizes the registration of the events and initiative - gives out information and tools for the organisors of projects - puts an emphasis an a few initiatives arround the world at the moment when they happen E-mail : info(a)internet-fiesta.org >From march 3th and 4th of march 2001 : Citi des Sciences et de l'Industrie Espace Condorcet (Niveau 0) 30 avenue Corentin-Cariou75019 Paris Mitro : Porte de la Villette How to participate ? Use your imagination and ressources and organise your own event ! Find an idea and sare it with your friends and partners. Once the concept is ready, register it on the Fiesta website :www.internet-fiesta.org Where ever you are Let's fiesta all together >From the 2nd to the 4th of March 2001, the best Information Society ideas will be on focus Where to participate ? On the Internet of course, but also in the villages, in the street, shops or coffes. The services and solutions offered through Internet to the citizens, employees and administrations shall be put forward. Internet Fiesta is the sum of all the events taking place in every country, during the three days. This Fiesta is yours The Ethics The organisation of the Internet Fiesta 2001 is concieved and functions as a human network and because it is a human network. It develops in much the same way as freeware does There for it was possible to demonstrate that you can organize a number of events in an number of languages in the world. After the success of the past two years of Internet Fiesta, we are pursuing this impulse broadenig the event so that you can all participate. ----- End forwarded message ----- -- MJR

1 0

Internet security - cable modems ?
by Andrew Cartwright 26 Feb '01

26 Feb '01

Hi, I would appreciate your help once again, I am using RH 7.0 at the moment and have just configured my NIC (Netgear fa311) to enable my cable modem internet connection. RH 7.1(fisher) configures everything automatically IE NIC,DHCP and firewall. this is all very well but doesn't teach me a great deal about what is going on in the background. I intend to set up RH 7.0 with a firewall and any other security measures that are needed. I would very much appreciate any suggestions/help that anyone can offer to assist me setting up the required services. Things along the lines of :- Which services to disable (and how) Which firewall - ipchains or other package and tips on setting it up TIA

1 0

Re: [Alug] I hope this isn't inappropriate...
by MJ Ray 26 Feb '01

26 Feb '01

I think I'll let both sides howl each other out. ;-) The older hands who remember Laurie's earlier generosity to the group will know he's not the type to say such things for no reason. Those who don't care about IR35 can deal with them if they want to. The list policy on advertising remains "fuzzy" and it's generally a good idea to seek guidance *before* you post. -- MJR

2 1

Re: [Alug] Faxgetty, Mgetty and data calls - anyone?
by MJ Ray 25 Feb '01

25 Feb '01

Barry Samuels <barry(a)datamansys.co.uk> writes: > If I run FaxAddModem it identifies the modem as Class 1 (the > relevant command, as I remember, returns 0,1,1,0). Does that affect > its data capabilities? Yes. I think Hylafax only handles Class 2 modems. If it really is Class 1 (like mine), you'll need to use efax and hope that the system load is low enough so as not to affect timing too much. > > Can you send OK from it? > Sorry - don't understand what you mean. Can you send faxes from it with Hylafax? If so, it's probably Class 2 and I'm wrong in what I just said above. > > The mgetty ???s sounds a bit like it's trying to start PPP on you. > Why would it do that? Could I prevent it? No idea, sadly. I've never played with mgetty. -- MJR

2 1

I hope this isn't inappropriate...
by Gavin Smith 25 Feb '01

25 Feb '01

I am an IT recruitment consultant working with a technology start up based in Suffolk. My client is a content networking company providing a unique technology to aid the real-time acceleration of multiple types of content including video, audio, web, gaming and finance information. Their customers include telecommunications service providers, ISPs and major enterprise companies, all of who want to distribute multiple types of content over one platform to large numbers of clients or users. They have several exciting positions currently available for software engineers and team leaders. If you have any of the following skills we'd like to here from you! * Java Development * C/C++ * FreeBSD/Linux kernel development * QA & Testing * IP Networking * IP Multicast protocols If you would be interested (or even just curious) please contact me for further details. Regards Gavin Smith Best International **************************************************************************************** Official winners of the UK IT Recruitment Service of the Year Computing Awards for Excellence 2000 Best International Group Plc Registered in England No. 3246014 London (Head Office) +44 (0)20 7300 9000 Bristol +44 (0)117 945 9000 Birmingham +44 (0)121 335 9000 Manchester +44 (0)161 942 9000 Scotland +44 (0)131 524 9000 This email is confidential and intended solely for the use of the individual to whom it is addressed. Any representations (contractual or otherwise), views or opinions presented are solely those of the author and do not necessarily represent those of Best International Group, or any of its group companies. If you are not the intended recipient be advised that you have received this email in error and that any use, dissemination, forwarding, printing or copying of this email is strictly prohibited. If you have received this email in error please notify the sender. This footnote also confirms that this email message has been swept by MIMEsweeper for the presence of computer viruses. ****************************************************************************************

3 3

Re: [Alug] Faxgetty, Mgetty and data calls - anyone?
by MJ Ray 25 Feb '01

25 Feb '01

Barry Samuels <barry(a)datamansys.co.uk> writes: > I apologise in advance for that bit of important information that I have > almost certainly forgotten to include. Which Hayes Accura 56k? Not all do Class 2 fax. Can you send OK from it? The mgetty ???s sounds a bit like it's trying to start PPP on you. This is probably an irrelevant line of attack. ;-) -- MJR

2 1

Faxgetty, Mgetty and data calls - anyone?
by Barry Samuels 24 Feb '01

24 Feb '01

I've spent hours and hours trying to set up Hylafax/Faxgetty to auto detect fax/data calls and respond appropriately. I have had partial success in that I can now get it to distinguish between fax and data calls and accept the fax or start mgetty for a data call. Part of my original problem was that the default config.ttyS1 GettyArgs included -h as the first option which caused Mgetty to start and then immediately stop after printing a 'Usage' line in the log. I have, at least been able to correct that. My current config.ttyS1 gettyargs is: GettyArgs: "-D %l dx_%s" I have also tried "-r -s %s %l" together with many other combinations. If I dial in from another machine the call is answered as a data call and mgetty started but on the machine that I dialled in from I see a line of about two dozen characters, most of which appear to be '?', then the cursor returns to the beginning of the line, overwrites part of the existing line before dropping down one line, printing a few more characters then dropping down another line and displays 'NO CARRIER'. I never get to see a login prompt and these tests are costing me a fortune in telephone calls! It doesn't seem to make any difference whatever options I try the result is always as described above. The getty on the Hylafax machine is left running and has to be killed. The mgetty log shows: 02/23 09:52:33 yS1 mgetty: experimental test release 1.1.21-Jul24 02/23 09:52:33 yS1 check for lockfiles 02/23 09:52:33 yS1 huh? It's *our* lock file! 02/23 09:52:33 yS1 locking the line 02/23 09:52:33 yS1 makelock(ttyS1) called 02/23 09:52:33 yS1 do_makelock: lock='/var/lock/LCK..ttyS1' 02/23 09:52:33 yS1 we *have* the line! 02/23 09:52:33 yS1 lock made 02/23 09:52:34 yS1 tio_get_rs232_lines: status: RTS CTS DSR DTR 02/23 09:52:34 yS1 tss: set speed to 115200 (10002) 02/23 09:52:34 yS1 tio_set_flow_control( HARD ) 02/23 09:52:34 yS1 waiting for line to clear (VTIME), read: 02/23 09:52:34 yS1 send: \d\d\d+++\d\d\dATZ[0d] 02/23 09:52:37 yS1 waiting for ``OK'' 02/23 09:52:37 yS1 got: [0d][0a]CONNECT[0d][0a][0d][0a]OK ** found ** 02/23 09:52:43 yS1 waiting for line to clear (VTIME), read: [0d][0a] 02/23 09:52:43 yS1 removing lock file 02/23 09:52:43 yS1 waiting... Although, in this section, the modem is reset I have tried other options which give the following in the log: 02/23 09:40:20 yS1 mgetty: experimental test release 1.1.21-Jul24 02/23 09:40:20 yS1 check for lockfiles 02/23 09:40:20 yS1 huh? It's *our* lock file! 02/23 09:40:20 yS1 locking the line 02/23 09:40:20 yS1 makelock(ttyS1) called 02/23 09:40:20 yS1 do_makelock: lock='/var/lock/LCK..ttyS1' 02/23 09:40:20 yS1 we *have* the line! 02/23 09:40:20 yS1 lock made 02/23 09:40:20 yS1 tio_get_rs232_lines: status: RTS CTS DSR DTR 02/23 09:40:20 yS1 tss: set speed to 115200 (10002) 02/23 09:40:20 yS1 tio_set_flow_control( HARD ) 02/23 09:40:20 yS1 waiting for line to clear (VTIME), read: 02/23 09:40:20 yS1 send: \dATQ0V1H0[0d] 02/23 09:40:21 yS1 waiting for ``OK'' 02/23 09:40:21 yS1 got: [0d][0a]OK ** found ** 02/23 09:40:21 yS1 send: AT[0d] 02/23 09:40:21 yS1 waiting for ``OK'' 02/23 09:40:21 yS1 got: [0d][0a][0d][0a]OK ** found ** 02/23 09:40:21 yS1 waiting for line to clear (VTIME), read: [0d][0a] 02/23 09:40:22 yS1 removing lock file 02/23 09:40:22 yS1 waiting... I have also read as much documentation as I could find without any luck and have tried posting on two newsgroups and the Debian mailing list but have had no replies. I am running Debian 2.2 with kernel 2.2.18pre21, I have a Hayes Accura 56k fax/data modem and I am running Hylafax version 4.0.2-14. The machine that I'm dialling in from is running Windows 95 although I have tried it from another Debian machine using Minicom with exactly the same results. I apologise in advance for that bit of important information that I have almost certainly forgotten to include. What am I doing wrong? Help would be very much appreciated. Barry Samuels

1 0

Jump to page:

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

2003

2002

2001

2000

1999

1998

1997

main