RE: Mass update deployment strategy

2006-11-27 Thread Morgan Walker
There is also a package called cron-apt which will automatically update
your debian machines and send you an email regarding what it updated.

~Morgan

-Original Message-
From: George Georgalis [mailto:[EMAIL PROTECTED] 
Sent: Monday, November 27, 2006 3:37 PM
To: debian-security@lists.debian.org
Subject: Re: Mass update deployment strategy

On Mon, Nov 27, 2006 at 08:37:42PM +0100, mario wrote:
>Hello List,
>
>i am responsible for 10 (ubuntu and debian) installations so far.
>I have installed apticron which informs me about updates frequently. 
>Actually, its that often that i sometimes need to invest 1h a day just
>doing updates.
>
>Do you have a strategy or anything to automate this task a little more?
>The server farm is growing and i might have to look after 20 or 30
>installations soon. I can already see myself updating ubuntu/debian
>installations all day long :(.
>
>My installations are most of the time small firewalls and samba
servers.
>
>Any comments or field reports about this?

on your master computer you could run a script somthing like this...

#!/bin/sh

set -e
set -x
ENV="set -e && export TERM=$TERM && . /etc/profile"
UPD="echo && hostname && Updating Package Lists... && apt-get -qq update
|| true"
UPG="apt-get upgrade --show-upgraded"
UPC="apt-get clean"

for n in host1 host2 hostz; do
 ssh [EMAIL PROTECTED] "$ENV && $UPD ; $UPG && $UPC"
done


don't forget to have ssh-agent working beforehand.

// George

-- 
George Georgalis, systems architect, administrator <


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact
[EMAIL PROTECTED]



RE: [OT] Re: email notifications when users login

2006-09-21 Thread Morgan Walker

Thanks Michelle that worked perfect.  Is there an easy variable I could
throw in there that you know off hand which would include the time
(MM/DD/) as well?

Thanks again guys

-Original Message-
From: Michelle Konzack [mailto:[EMAIL PROTECTED] 
Sent: Tuesday, September 19, 2006 6:59 PM
To: debian-security@lists.debian.org
Subject: [OT] Re: email notifications when users login

Hi Morgan,

Am 2006-09-18 15:34:30, schrieb Morgan Walker:
> Hey guys,
> 
> I was just wondering if there was a package/script out there that
could
> be used to notify the sys. admin every time a user logged into a
debian
> system.


#/etc/profile

echo "The User  ${LOGNAME}  has loged in." |\
sendmail -f [EMAIL PROTECTED]  [EMAIL PROTECTED]



Thanks, Greetings and nice Day
Michelle Konzack
Systemadministrator
Tamay Dogan Network
Debian GNU/Linux Consultant


-- 
Linux-User #280138 with the Linux Counter, http://counter.li.org/
# Debian GNU/Linux Consultant #
Michelle Konzack   Apt. 917  ICQ #328449886
   50, rue de Soultz MSM LinuxMichi
0033/6/6192519367100 Strasbourg/France   IRC #Debian (irc.icq.com)


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact
[EMAIL PROTECTED]



RE: email notifications when users login

2006-09-18 Thread Morgan Walker
Thanks guys, think I am going to implement logcheck, it looks promising.

~Morgan

Morgan Walker
Systems Administrator/Engineer
M*CAM, Inc.
Omni Business Center
210 Ridge-McIntire Rd., Suite 300
Charlottesville, VA 22903
434.979.7240 x311 


http://www.m-cam.com 
=
This message, including any attachments, is intended solely for the use
of the named recipient(s) and may contain confidential and/or
privileged information.  Any unauthorized review, use, disclosure or
distribution of this communication(s) is expressly prohibited.
If you are not the intended recipient, please contact the sender by
reply e-mail and destroy any and all copies of the original message.
Thank you. 
=

-Original Message-
From: Manuel García [mailto:[EMAIL PROTECTED] 
Sent: Monday, September 18, 2006 3:46 PM
To: Morgan Walker
Cc: debian-security@lists.debian.org
Subject: Re: email notifications when users login

I'm not quite sure if this is the right list to ask that kind of
question, but, there is a package name logcheck, it send email for
everything that happend on system logs, and anything else you said,
also you can use perl-like regular expresion to filter the email that
logcheck sends to you, read the documentation about it.
Enjoy.

On 9/18/06, Morgan Walker <[EMAIL PROTECTED]> wrote:
>
>
>
>
> Hey guys,
>
>
>
> I was just wondering if there was a package/script out there that could be
> used to notify the sys. admin every time a user logged into a debian system.
>
>
>
> Thanks in advance,
>
>
>
> Morgan
>
>
>
> Morgan Walker
>  Systems Administrator/Engineer
>  M*CAM, Inc.
>  Omni Business Center
>
> 210 Ridge-McIntire Rd., Suite 300
>
> Charlottesville, VA 22903
>  434.979.7240 x311
>
>
>
> http://www.m-cam.com
>  =
>  This message, including any attachments, is intended solely for the use
>  of the named recipient(s) and may contain confidential and/or
>  privileged information.  Any unauthorized review, use, disclosure or
>  distribution of this communication(s) is expressly prohibited.
>  If you are not the intended recipient, please contact the sender by
>  reply e-mail and destroy any and all copies of the original message.
>  Thank you.
>  =
>
>


-- 
Manuel Garcia.
Jefe de Informática CASEP.
Administrador de redes
Consultor independiente
Debian GNU/Linux Testing codename "Etch"



email notifications when users login

2006-09-18 Thread Morgan Walker








Hey guys,

 

I was just wondering if there was a package/script out there
that could be used to notify the sys. admin every time a user logged into a
debian system.

 

Thanks in advance,

 

Morgan

 

Morgan Walker
Systems Administrator/Engineer
M•CAM, Inc.
Omni Business Center

210
  Ridge-McIntire Rd., Suite 300

Charlottesville, VA 22903
434.979.7240
x311 

 

http://www.m-cam.com 
=
This message, including any attachments, is intended solely for the use
of the named recipient(s) and may contain confidential and/or
privileged information.  Any unauthorized review, use, disclosure or
distribution of this communication(s) is expressly prohibited.
If you are not the intended recipient, please contact the sender by
reply e-mail and destroy any and all copies of the original message.
Thank you. 
=

 








INFECTED (PORTS: 600)

2006-05-18 Thread Morgan Walker








Hey guys,

 

Just new to this mailing list, hope you guys can help me
out.  I was testing out the chkrootkit package on one of my debian
boxes.  After running ‘chkrootkit –q’ I received the
following output:

 

INFECTED (PORTS:  600)

 

I looked further into and narrowed down to this.  ‘netstat
-naptu | grep 600’ gave me the following ouput:

 

udp   
0  0
0.0.0.0:600
0.0.0.0:* 
2120/rpc.statd

 

I have searched around on other mailing lists and forums,
but could never really get a definitive answer.  Is this a common message
for chkrootkit, should I be worried?  Any help would be great, thanks in
advance.

 

~Morgan

 

Morgan Walker
Systems Administrator/Engineer
M•CAM, Inc.
Omni Business Center

210
  Ridge-McIntire Rd., Suite 300

Charlottesville, VA 22903
434.979.7240
x311 

 

http://www.m-cam.com 
=
This message, including any attachments, is intended solely for the use
of the named recipient(s) and may contain confidential and/or
privileged information.  Any unauthorized review, use, disclosure or
distribution of this communication(s) is expressly prohibited.
If you are not the intended recipient, please contact the sender by
reply e-mail and destroy any and all copies of the original message.
Thank you. 
=