I'm out of the office from May 15 - 24, on vacation in Alaska. If you must get a hold
of me, try my cel at 801-368-0486 well see if it works in the bush:)
>>> "[EMAIL PROTECTED]" 05/14/00 02:00 >>>
Firewalls-Digest Sunday, May 14 2000 Volume 08 : Number 984
In this issue:
RE: Virus Removing
Re: VPN based on CIPE
Re: VPN based on CIPE
Re: Virus Removing
RE: VPN based on CIPE
CIPE VPN ANS
Re: java applet and firewall
See the end of the digest for information on subscribing to the Firewalls
or Firewalls-Digest mailing lists and on how to retrieve back issues.
----------------------------------------------------------------------
Date: Sat, 13 May 2000 19:24:53 +0800
From: Ronneil Camara <[EMAIL PROTECTED]>
Subject: RE: Virus Removing
> -----Original Message-----
> From: A.T.Z. [mailto:[EMAIL PROTECTED]]
> Sent: Saturday, May 13, 2000 3:02 PM
> To: Gangadhar; [EMAIL PROTECTED]
> Subject: Re: Virus Removing
>
>
>
> > I am having 4.3 GB harddisk, now its partition
> table infected by
> >virus. I tried with Fdisk/mbr option when i did that it is
> giving message
> >'Bootsector Write ? Virus:Continue (Y/N) ".
It appears because it is enabled in CMOS (Virus checking enabled or set to
YES).
- -
[To unsubscribe, send mail to [EMAIL PROTECTED] with
"unsubscribe firewalls" in the body of the message.]
------------------------------
Date: Sat, 13 May 2000 14:54:53 +0200
From: Bernd Eckenfels <[EMAIL PROTECTED]>
Subject: Re: VPN based on CIPE
On Fri, May 12, 2000 at 12:56:36PM -0700, Geoff Nordli wrote:
> Does anyone have any comments on using CIPE for VPN's??
>
> http://sites.inka.de/~W1011/devel/cipe.html
It is a stable and leightweigt tool. Especially if you dont need key
management or roaming support (it can be done with cie but not very nice)
then it is a good tool as long as you have linux gateways on both sites. The
implementation has a low inpact on the cpu compared to other high security
solutions. Using UDP it is quite good routable and performsa better than TCP
based tunnels. 1.3 is the version i know and use.
Greetings
Bernd
- -
[To unsubscribe, send mail to [EMAIL PROTECTED] with
"unsubscribe firewalls" in the body of the message.]
------------------------------
Date: Sat, 13 May 2000 15:07:13 +0200 (MEST)
From: Mikael Abrahamsson <[EMAIL PROTECTED]>
Subject: Re: VPN based on CIPE
On Fri, 12 May 2000, Geoff Nordli wrote:
> Does anyone have any comments on using CIPE for VPN's??
Pros:
I get 10-20mbit/s on medium speed Intel PentiumII/III hardware. Good bang
for the buck.
Fairly easy to set up, and works thru NAT (common UDP packets that doesnt
mind being adress translated).
Cons:
You cannot traceroute thru the tunnel (packets seem to be dropped).
You cannot use OSPF thru tunnel.
MTU is 1432 (or something around there) might be a problem for some sites
(Path MTU Discovery must work).
I've sometimes gotten some weird problems that require bringing down the
tunnel (I just reboot of the machine) in order to fix. Happens approx once
a month or so.
- --
Mikael Abrahamsson email: [EMAIL PROTECTED]
- -
[To unsubscribe, send mail to [EMAIL PROTECTED] with
"unsubscribe firewalls" in the body of the message.]
------------------------------
Date: Sat, 13 May 2000 14:21:42 +0100 (BST)
From: [EMAIL PROTECTED]
Subject: Re: Virus Removing
>
> Hi,
> I am very sorry, if this question is out off this list. But
It is off-topic. Nevertheless, I'm forwarding to the list in case
anyone is misled by any of the other responses.
>
> I am having 4.3 GB harddisk, now its partition table infected by
> virus.
Are you sure? If you're assuming that this is so because of the message
below, that's an unsafe assumption. Some CMOS's and hardware have an
option to detect/block possible virus action by monitoring the MBR,
but can't tell the difference between an MBR infector and an FDISK
write. If you think you have a boot sector infection and don't know
- -which- virus, FDISK /mumble isn't a good idea. (1) Not all boot sector
viruses infect the MBR (2) Some that -do- also encrypt the MBR and/or
the disk. If you clean boot, the virus isn't in memory to decrypt,
so you may lose access to programs or data when the virus has gone.
> I tried with Fdisk/mbr option when i did that it is giving message
> 'Bootsector Write ? Virus:Continue (Y/N) ".
Sounds like CMOS bootsector 'virus protection'.
> Even i tried with low level
> format using DM utility.
LLFs are complete overkill for virus problems.
> Is there any solution for this kind of problem.
> Any utility available on the Net to solve this kind problem
>
Yep. It's called anti-virus software. B-)
- --
David Harley <[EMAIL PROTECTED]><[EMAIL PROTECTED]>
Mac virus FAQ - http://www.sherpasoft.org.uk/MacSupporters/macvir.html
alt.comp.virus FAQ - http://www.sherpasoft.org.uk/acvFAQ/
Email abuse FAQ - http://www.sherpasoft.org.uk/hoaxfaq/Mis-IT.html
- -
[To unsubscribe, send mail to [EMAIL PROTECTED] with
"unsubscribe firewalls" in the body of the message.]
------------------------------
Date: Sat, 13 May 2000 08:16:25 -0700
From: "Geoff Nordli" <[EMAIL PROTECTED]>
Subject: RE: VPN based on CIPE
Bernd do you have the same stability problems that Mikael experiences??
> -----Original Message-----
> From: [EMAIL PROTECTED]
> [mailto:[EMAIL PROTECTED]]On Behalf Of Mikael Abrahamsson
> Sent: Saturday, May 13, 2000 6:07 AM
> To: GNAC firewall list (E-mail)
> Subject: Re: VPN based on CIPE
>
>
> On Fri, 12 May 2000, Geoff Nordli wrote:
>
> > Does anyone have any comments on using CIPE for VPN's??
>
> Pros:
>
> I get 10-20mbit/s on medium speed Intel PentiumII/III
> hardware. Good bang
> for the buck.
>
> Fairly easy to set up, and works thru NAT (common UDP packets
> that doesnt
> mind being adress translated).
>
> Cons:
>
> You cannot traceroute thru the tunnel (packets seem to be dropped).
>
> You cannot use OSPF thru tunnel.
>
> MTU is 1432 (or something around there) might be a problem
> for some sites
> (Path MTU Discovery must work).
>
> I've sometimes gotten some weird problems that require
> bringing down the
> tunnel (I just reboot of the machine) in order to fix.
> Happens approx once
> a month or so.
>
> --
> Mikael Abrahamsson email: [EMAIL PROTECTED]
>
> -
> [To unsubscribe, send mail to [EMAIL PROTECTED] with
> "unsubscribe firewalls" in the body of the message.]
>
- -
[To unsubscribe, send mail to [EMAIL PROTECTED] with
"unsubscribe firewalls" in the body of the message.]
------------------------------
Date: Sat, 13 May 2000 09:26:46 -0600
From: dreamwvr <[EMAIL PROTECTED]>
Subject: CIPE VPN ANS
hi,
CIPE works fine for a "Linux" to "Linux" VPN solution "BUT" does not work in
a heterogenous environment "BUT" what does is FreeSWan works just fine in
such situations. If it helps think of CIPE as a "linux only solution". Plus
Free SWan is more secure period. hope that helps.
Best Regards,
[EMAIL PROTECTED]
- -
[To unsubscribe, send mail to [EMAIL PROTECTED] with
"unsubscribe firewalls" in the body of the message.]
------------------------------
Date: Sat, 13 May 2000 14:13:18 GMT
From: [EMAIL PROTECTED]
Subject: Re: java applet and firewall
Hi,
>java.sql.SQLException: Unable to check numeric address "206.190.163.222".
This applet is using JDBC to connect to the DB, so I suspect that it would
not be communicating over the native SQL server protocol. Look for the the
port used by JDBC remote drivers. (Off hand, I don't know.)
HTH,
CB
- -
[To unsubscribe, send mail to [EMAIL PROTECTED] with
"unsubscribe firewalls" in the body of the message.]
------------------------------
End of Firewalls-Digest V8 #984
*******************************
To unsubscribe from Firewalls-Digest, send the following command
in the body of a message to "[EMAIL PROTECTED]":
unsubscribe firewalls-digest
If you want to subscribe or unsubscribe an address other than the
account the mail is coming from, such as a local redistribution list,
then append that address to the command; for example, to subscribe
"local-firewalls":
subscribe firewalls-digest [EMAIL PROTECTED]
A non-digest (direct mail) version of this list is also available; to
subscribe to that instead, replace all instances of "firewalls-digest"
in the commands above with "firewalls".
Compressed back issues are available for anonymous FTP from
Lists.GNAC.NET, in pub/firewalls/digest/vNN.nMMM.Z (where "NN"
is the volume number, and "MMM" is the issue number).
-
[To unsubscribe, send mail to [EMAIL PROTECTED] with
"unsubscribe firewalls" in the body of the message.]
