search for: psionic

...I hope). 5) There are some limitations for *BSD variants. Read the docs (and README.wtmp) for details. 6) The tool is written in 100% Python and you'll want to have the latest version (http://www.python.org). 7) It's free, but please read the license. You can get the tool from: http://www.psionic.com/abacus/hostsentry You can read about the other tools here: http://www.psionic.com/abacus You can subscribe to the mailing list by sending a subscribe message to: abacus-request@psionic.com abacus-announce-request@psionic.com What the tool actually does: HostSentry monitors system login ac...

If it''s any help, here''s a sed script that is reasonably good at pulling out suspicious-looking items generated by various daemons. Fix appropriately... _H* ========== # this should match a buncha different stuff / [Pp]ermi/b ff / PERMI/b ff / [Rr]efuse/b ff / REFUSE/b ff / [Dd]en[yi]/b ff / DEN[YI]/b ff /[Rr]eject/b ff /REJECT/b ff /[Bb]ogus/b ff /[Pp]assw/b ff /PASSW/b ff

...gt; > just > > change the #!/bin/sh at the top of the script to something like : > > #!/usr/sbin/chroot /chroot-dns/ /bin/sh > > or > > #!/usr/sbin/chroot /chroot-dns/ /chroot-dns/bin/sh An excellent Howto for a chrooted name dis loclated at : http://www.psionic.com/papers/dns-linux.html HTH Jan ---------------------------------------------------- "May the Schwartz be with you" ---------------------------------------------------- J.Gruber System Administration mail: jgr@tpnet.de Teleport Bitterfeld, ISP, Web hosting

Someone I was speaking with this evening claimed they have installed the latest named rpms yet they are still getting exploited daily and being hacked. Do the latest rpm''s for the named 4.9.x stuff fix all the root exploits or is this person just an idiot who probably has holes elsewhere in the system?

...ystems =-=-=-=-=-=-=-=-= The "Classic" mode has been tested on Linux, *BSD, NEXTSTEP, and HPUX. The stealth modes have only been tested on RedHat Linux. I would love to have tests done under the BSD variants. Downloading =-=-=-=-=-= Sentry can be downloaded for free from: http://www.psionic.com/abacus/abacus_sentry.html Thanks, -- Craig http://www.psionic.com Here is the config file to give you an idea of the features: # Sentry Configuration # # $Id: sentry.conf,v 1.12 1998/05/27 04:26:41 crowland Exp crowland $ # # IMPORTANT NOTE: You CAN NOT put spaces between your port...

Maybe one of you can help. We have set up a CentOS server so that each user who logs in via sftp will be jailed in their home directory. Here's the relevant sshd_config: # override default of no subsystems Subsystem sftp internal-sftp -f LOCAL2 -l INFO Match Group sftponly ChrootDirectory /home/%u ForceCommand internal-sftp This actually works great, but none of

Has anyone ever interfaced a merdian option 11 and asterisk. Just wondering how you went about, it's for a small setup me only need between 4/6 channels, I was thinking about using some spare ISDN channels between the two. Has anyone seen an SIP option for the meridian? ************************************************************ European Museum Of The Year 2002 The Chester Beatty

Hi, all: This is just a note and suggestion, not a question; but I really like this system and thought it might be useful to others so I decided to share. Hope it helps someone, and comments or suggestions are always welcome. 1. Overview: Shorewall accepts traffic on ports that I consider "hostile" (i.e. ports on which I would NEVER expect to see connections) and redirects

...(I will include a snprintf function in later releases). The code is currently in Beta and is version 0.08 at the time of this writing. The code is available for testing now and I''m especially looking for code reviews and suggestions to improve it. You can find the program at: http://www.psionic.com/abacus/abacus_sentry.html Thanks, -- Craig http://www.psionic.com Here is the configuration file to give you the idea of the options available: # Abacus Sentry Configuration # # $Id: abacus_sentry.conf,v 1.8 1997/12/05 07:31:38 crowland Exp crowland $ # # IMPORTANT NOTE: You CAN NOT p...

Are there any known vulnerabilities in portmap (redhat''s portmap-4.0-7b)? I''ve been receiving a lot of attempts to access the portmap port on some linuxppc machines I administer by various machines which clearly have no business with mine, and I wonder if this is an attempt to break in to my machines. I''ve searched some archives, but I haven''t yet found any

George Brown sent this to my private Email address instead of to the list. Because I forwarded it, my addres is in the header. Roger. ----- Forwarded message from root ----- >From root@bull.bullnet.co.uk Mon Aug 24 16:20:29 1998 Received: from dutepp0.et.tudelft.nl by rosie.BitWizard.nl (fetchmail-4.2.9 POP3 run by wolff) for <wolff@localhost> (single-drop); Mon Aug 24

Woops... this didn't show up here but it did on BugTraq. Questions answered! -- Chuck Mead, CTO, MoonGroup Consulting, Inc. <http://moongroup.com> Mail problems? Send "s-u-b-s-c-r-i-b-e mailhelp" (no quotes and no hyphens) in the body of a message to mailhelp-request@moongroup.com. Public key available at: wwwkeys.us.pgp.net ----------