search for: kolicz

> From: Zoran Kolic <kolicz@eunet.yu> > Subject: about nmap > To: freebsd-security@freebsd.org > Message-ID: <20040808053526.GA652@kolic.net> > Content-Type: text/plain; charset=us-ascii > > Dear all! > Last evening I've noticed that > my 5.2 box had strange result > about nmap search....

Hello! Attempt to scan a network with any method except plain ping results in an error: truss nmap -sT -p 21 '172.19.17.*' [...] sendto(0x4,0x8094200,0,0x0,{ AF_INET 172.19.17.0:0 },0x10) ERR#49 'Can't assign requested address' [...] What's strange that man on send(2) doesn't state that EADDRNOTAVAIL can ever be returned from sendto(). Quick look at nmap's site

...r gives new address every time when connected. One machine. Via ppp... And most of all: dinamic rules. It was thread some months ago, but cannot find it. If someone could remem- ber those links, would be appreciate. Best regards Zoran Kolic kolicz@eunet.yu

Dear folks! Using f-prot, I've found "unix/abyoos.a" in one pure ascii file. Simple googling didn't reveal any special info about. Is it something I should be aware of? What parts of it could I find on the system, if any? Best regards Zoran

Dear list! I have a little problem, trying to enable logging of deny rule. I have enabled it via kernel: options IPFIREWALL options IPFIREWALL_VERBOSE options IPFIREWALL_VERBOSE_LIMIT=3 It is ipfw2. After that, my inten- tion was to use syslogd and !ipfw *.* /var/log/ipfw.log and newsyslog with /var/log/ipfw.log 600 3 100 * J In rc.conf I have firewall_enable="YES"

...s. Is there someone, who knows what to do for linking kernel to finaly compile? Script excludes and includes exactly what I said. Yes, 5_0 is very unstable and behaves a lot different than stable 4_. Best regards Zoran Kolic kolicz@eunet.yu

Dear list! I'd like to know if some- one has experience with system running no mta (aka sendmail). I have single comp, not server, not lan. Yes! Sendmail is nice, but it is too big for simple tasks I have for it. My intention is to use apps small as possible. This letter gone from mutt directly to ssmtp, that processed it to my isp. (Setting option for sendmail as

Dear List! Using every successive isue, I have the same trouble: to write a simple CD. My writer is TEAC W540E, last rel. 5_1. Hardware is healty, cause on the same hdd I have obsolette RedHat 7.3 that writes perfect. I use scsi-emulation via camcontrol and cdrecord. So, I make iso image, put everything in a command line as I always do, and on freeBSD cannot be sure, that the result will be

Hi all! For a long time I see icmp 3.3 packets in my log, coming from 65.59.245.131. Cannot find what this address is in fact. Every day, on both i386 and amd64. I use ipfw and not a server at all. Comes even if I just look for mail in console. Does someone have similar item in log? One more question. What are those udp probes on 1025-7 ports? Best regards Zoran

Dear all! I'd like to know if something changed for pgp263i on amd64. In ports, archs recommended are i386 and alpha. Has someone used gpg-idea port (with idea and rsa) to circum- vent pgp <-> gpg missmetch? Best regards Zoran

Hi all! After installing 5.3 I've noticed some change in firewall logging. Prior (on 5.2) rules gave me what I needed: trimed to 3 of the same connection. Every new connection on the same rule gave new log line up to 3. I have in kernel: FIREWALL FIREWALL_VERBOSE FIREWALL_VERBOSE_LIMIT=3 Now, all connections on the same rule are trimed to 3. Is it possib- le on 5.3 to have all

> I use, thus far, "allow icmp from any to any icmptypes 0,3,4,8,11". That > include 'echo request', of course. Someone else may have a better idea. You want to be pinged? Why don't you let something in and something out? I.e.: add 10000 allow icmp from any to any icmptypes 8 out add 10100 allow icmp from any to any icmptypes 0 in add 10200 allow icmp from any to any

Dear all! Last evening I've noticed that my 5.2 box had strange result about nmap search. One port is randomly open when I look from user account. From root everything looks as expected. The comp is most time out of internet. The last thing was adding "expect" package. I am not paniced, could be hiting... Or something in "expect" package... It is random port from 53000 to

Dear Peter! I think it's time to reinstall now. Not at the end of week. If you have any doubt, don't spend more time to check logs. Some measures could be taken to clear it to look fine. Yes. You spent more time to check logs than you will to reinstall. Write on your conf files and all will be as you wish for 30-60 minutes. ZK

Dear list! I've tried to compile tripwire-2.3.1-2 port on my 5.2 release. Two diffe- rent tarballs have failed with message, that port was broken, all in one sentence. No any details. Well! Makefile has so- mething like: .if ${OSVERSION} >= 500000 BROKEN= "Fails to build inder 5.X" .endif One more: USE_GMAKE= yes Has someone compiled it successfully? Is it for a good