Re: Hi honey. It is of course Cutey Julie
hi honey how are you doing.
hi you doing today
I realy need to kno How to chang my password for my yahoo messenger it is very important .
Hi honey. It is of course Cutey Julie
Hi there you. It is Hottie J, from the web site place with personals. I was reading all about you and I just wanted to say Hi u. I have a internet website thingy where you can see all about me and see what I look like too. I just cant wait to hear from you again soon hottie. ttys, Jliscous www.kowey.5lessthanless.com/ju29/ __ Colleen asplenium beadle nod bound baklava indochina. no pcmagsjell .com/retract/ Bradley osgood fibrin sensor lyric nietzsche.
Hi, everyone
I use pam_passwdqc.so to enforce strong password. I add "password required pam_passwdqc.so enforce=users" into /etc/pam.d/common-password. When I change password of user, it works, but only warns of weak password and doesn't forbid the updating. Why and How All the best JoHnnyX -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
Hi,
Hello it's me Jessica... husband on business trip you can come and chat with me, i have an online profile...if you are look= ing for a sexy relationship we can meet each other http://himlove.com/d/8.php -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
Re: hi
On Fri, Mar 11, 2005 at 09:07:19PM +1100, Daniel Pittman wrote: > > I am having a problem in logging into my linux machine it is saying me > > that authentication failure > Try putting in the correct username and password; that should solve > that problem. > More seriously: this isn't a bug report, or a problem, it is a > statement of fact. We can't help you unless you tell us more about your > problem. > What are you trying to do, what is reporting the error, and how did you > configure security on the machine? Do you have re-used old lan ip? If yes, delete entry about remote host from .sshd/know-host and retry. -- Sythos - http://www.sythos.net () ASCII Ribbon Campaign - against html/rtf/vCard in mail /\- against M$ attachments -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
Re: hi
On 11 Mar 2005, [EMAIL PROTECTED] wrote: > I am having a problem in logging into my linux machine it is saying me > that authentication failure Try putting in the correct username and password; that should solve that problem. More seriously: this isn't a bug report, or a problem, it is a statement of fact. We can't help you unless you tell us more about your problem. What are you trying to do, what is reporting the error, and how did you configure security on the machine? Daniel -- Chaos often breeds life, when order breeds habit. -- Henry Adams -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
hi
Dear Sir, I am having a problem in logging into my linux machine it is saying me that authentication failure Regards VinsentP ---DISCLAIMER This Message and any attachments (the "message") is intended solely for the addressees and is confidential. If you receive this message in error, please delete it and immediately notify the sender. Any use not in accord with its purpose, any dissemination or disclosure, either whole or partial, is prohibited except formal approval. The internet cannot guarantee the integrity of this message. INGVysya Bank (and its subsidiaries) shall (will) not therefore be liable for the message if modified.
hi
http://www.geocities.com/alikahomapage/alika http://www.lizaclub.da.ru http://www.sokarim.tk
hi
http://lol.to/bbs.php?bbs=offspring Username: LIZA-ROOM-008 Password: XF459J
hi
http://lizaclub.da.ru http://lol.to/bbs.php?bbs=shakira <<< VIP Today Sally. NOT NEED CREDI CARD - PARTY 1. VIDEO 16MB PARTY 2. VIDEO http://pluginaccess.com/?w=preview&type=exe 3MB <<< try now PARTY 3. VIDEO 22MB PARTY 4. VIDEO 33MB PARTY 5. VIDEO 49MB PARTY 6. VIDEO 154MB Modem/ISDN Users: This archive features hundreds of movies therefore the movie previews on this page may take a bit of time to load for you, however please be patient, it will definitely be worth the wait. %100 FREE Rus-SexServer
Re: Hi :>
Hi Tom On Thu, Oct 18, 2001 at 07:46:01PM +0100, Tom Breza wrote: >Hi I got this today in my mail box, this is generated by somthing but I >don't know what is it? Why I got message from root? and why is empty? >also is strage a X-UIDL, >what can generate that kind of mail and why is empty? do you have log2mail installed? [EMAIL PROTECTED]:~$ dpkg -l | grep log2mail ii log2mail 0.2.5 Daemon watching logfiles and mailing lines m [EMAIL PROTECTED]:~$ I do and I get empty mails from root, too. Why is it empty ... I think, because of missing configuration! Regards Jan -- One time, you all will be emulated by linux! Jan- Hendrik Palic Url:"http://www.billgotchy.de"; E-Mail: "[EMAIL PROTECTED]" -BEGIN GEEK CODE BLOCK- Version: 3.12 GCS d- s: a-- C++ UL++ P+++ L+++ E W++ N+ o+ K- w--- O- M- V- PS++ PE Y+ PGP++ t--- 5- X+++ R-- tv- b++ DI-- D+++ G+++ e+++ h+ r++ z+ --END GEEK CODE BLOCK-- pgpWjZfE8rh4V.pgp Description: PGP signature
Re: Hi :>
Hi Tom On Thu, Oct 18, 2001 at 07:46:01PM +0100, Tom Breza wrote: >Hi I got this today in my mail box, this is generated by somthing but I >don't know what is it? Why I got message from root? and why is empty? >also is strage a X-UIDL, >what can generate that kind of mail and why is empty? do you have log2mail installed? palic@shaun:~$ dpkg -l | grep log2mail ii log2mail 0.2.5 Daemon watching logfiles and mailing lines m palic@shaun:~$ I do and I get empty mails from root, too. Why is it empty ... I think, because of missing configuration! Regards Jan -- One time, you all will be emulated by linux! Jan- Hendrik Palic Url:"http://www.billgotchy.de"; E-Mail: "[EMAIL PROTECTED]" -BEGIN GEEK CODE BLOCK- Version: 3.12 GCS d- s: a-- C++ UL++ P+++ L+++ E W++ N+ o+ K- w--- O- M- V- PS++ PE Y+ PGP++ t--- 5- X+++ R-- tv- b++ DI-- D+++ G+++ e+++ h+ r++ z+ --END GEEK CODE BLOCK-- PGP signature
Re: Hi :>
[Fri, Oct 19, 2001 at 08:42:34AM +0200] vdongen :
> I do have snort installed and it gives me nicely daily status logs
> containing absolutely nothing
Have you configured snort ? Iff not, this can be done via the debconf
front-end or via 'hand'.
--
ragOO, VU2RGU http://gnuhead.net.dhis.org/ GPG: 1024D/F1624A6E
Helping to keep the Air-Waves FREE Amateur Radio
Helping to keep your Software FREE the GNU Project
Helping to keep the W W W FREE Debian GNU/${kernel}
Re: Hi :>
I do have snort installed and it gives me nicely daily status logs containing absolutly nothing :( There might be more programs mailing root(or alias for root) with nothingCRON maybe... Gr, Ivo Without the darkness, how would you recognize the light? -Original Message- From: Tom Breza <[EMAIL PROTECTED]> Date: Thu, 18 Oct 2001 21:24:41 +0100 (BST) Subject: Re: Hi :> > > > > Previously Tom Breza wrote: > > > Hi I got this today in my mail box, this is generated by somthing > but I > > > don't know what is it? Why I got message from root? and why is > empty? > > > > Do you have snort installed? > > Hi Wichert > > No I don't have a snort in the system > Any other sugestions? > > Tom > > > > -- > > _ > > / Nothing is fool-proof to a sufficiently talented fool > \ > > | [EMAIL PROTECTED] http://www.liacs.nl/~wichert/ > | > > | 1024D/2FA3BC2D 576E 100B 518D 2F16 36B0 2805 3CB8 9250 2FA3 BC2D > | > > > > > > -- > > To UNSUBSCRIBE, email to [EMAIL PROTECTED] > > with a subject of "unsubscribe". Trouble? Contact > [EMAIL PROTECTED] > > > > > > > > > > > > > > > -- > To UNSUBSCRIBE, email to [EMAIL PROTECTED] > with a subject of "unsubscribe". Trouble? Contact > [EMAIL PROTECTED] >
Re: Hi :>
[Fri, Oct 19, 2001 at 08:42:34AM +0200] vdongen :
> I do have snort installed and it gives me nicely daily status logs
> containing absolutely nothing
Have you configured snort ? Iff not, this can be done via the debconf
front-end or via 'hand'.
--
ragOO, VU2RGU http://gnuhead.net.dhis.org/ GPG: 1024D/F1624A6E
Helping to keep the Air-Waves FREE Amateur Radio
Helping to keep your Software FREE the GNU Project
Helping to keep the W W W FREE Debian GNU/${kernel}
--
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
Re: Hi :>
I do have snort installed and it gives me nicely daily status logs containing absolutly nothing :( There might be more programs mailing root(or alias for root) with nothingCRON maybe... Gr, Ivo Without the darkness, how would you recognize the light? -Original Message- From: Tom Breza <[EMAIL PROTECTED]> Date: Thu, 18 Oct 2001 21:24:41 +0100 (BST) Subject: Re: Hi :> > > > > Previously Tom Breza wrote: > > > Hi I got this today in my mail box, this is generated by somthing > but I > > > don't know what is it? Why I got message from root? and why is > empty? > > > > Do you have snort installed? > > Hi Wichert > > No I don't have a snort in the system > Any other sugestions? > > Tom > > > > -- > > _ > > / Nothing is fool-proof to a sufficiently talented fool > \ > > | [EMAIL PROTECTED] http://www.liacs.nl/~wichert/ > | > > | 1024D/2FA3BC2D 576E 100B 518D 2F16 36B0 2805 3CB8 9250 2FA3 BC2D > | > > > > > > -- > > To UNSUBSCRIBE, email to [EMAIL PROTECTED] > > with a subject of "unsubscribe". Trouble? Contact > [EMAIL PROTECTED] > > > > > > > > > > > > > > > -- > To UNSUBSCRIBE, email to [EMAIL PROTECTED] > with a subject of "unsubscribe". Trouble? Contact > [EMAIL PROTECTED] > -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
Re: Hi :>
Previously Tom Breza wrote: > No I don't have a snort in the system > Any other sugestions? Can't think of anything. Check the email timings to see if the correspond to a crontab maybe. Wichert. -- _ / Nothing is fool-proof to a sufficiently talented fool \ | [EMAIL PROTECTED] http://www.liacs.nl/~wichert/ | | 1024D/2FA3BC2D 576E 100B 518D 2F16 36B0 2805 3CB8 9250 2FA3 BC2D |
Re: Hi :>
* Tom Breza <[EMAIL PROTECTED]> [2001.10.18 21:26:17+0100]: > but I don't have a snort, and this message I got second times, first time > I benn to busy and just ignore, but that seems to be repeat... what time? if 6am'ish, then try all you cron.daily scripts by hand and see which one emails you (tail -f /var/log/mail.log). -- martin; (greetings from the heart of the sun.) \ echo mailto: !#^."<*>"|tr "<*> mailto:"; [EMAIL PROTECTED] "it is the mark of an educated mind to be able to entertain a thought without accepting it." -- aristoteles pgp9sm0znvSnY.pgp Description: PGP signature
Re: Hi :>
> > * [EMAIL PROTECTED] <[EMAIL PROTECTED]> [2001.10.18 15:02:19-0400]: > > Please let me know also, > > because I have been getting empty messages from root too > > snort in stable and in testing seems to do this out of the box. > however, the UID *is* weird... but I don't have a snort, and this message I got second times, first time I benn to busy and just ignore, but that seems to be repeat... Tom
Re: Hi :>
> > Previously Tom Breza wrote: > > Hi I got this today in my mail box, this is generated by somthing but I > > don't know what is it? Why I got message from root? and why is empty? > > Do you have snort installed? Hi Wichert No I don't have a snort in the system Any other sugestions? Tom > > -- > _ > / Nothing is fool-proof to a sufficiently talented fool \ > | [EMAIL PROTECTED] http://www.liacs.nl/~wichert/ | > | 1024D/2FA3BC2D 576E 100B 518D 2F16 36B0 2805 3CB8 9250 2FA3 BC2D | > > > -- > To UNSUBSCRIBE, email to [EMAIL PROTECTED] > with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED] > > > > > >
Re: Hi :>
* [EMAIL PROTECTED] <[EMAIL PROTECTED]> [2001.10.18 15:02:19-0400]: > Please let me know also, > because I have been getting empty messages from root too snort in stable and in testing seems to do this out of the box. however, the UID *is* weird... -- martin; (greetings from the heart of the sun.) \ echo mailto: !#^."<*>"|tr "<*> mailto:"; [EMAIL PROTECTED] i took an iq test and the results were negative. pgpIzLJChLWqu.pgp Description: PGP signature
Re: Hi :>
Previously Tom Breza wrote: > Hi I got this today in my mail box, this is generated by somthing but I > don't know what is it? Why I got message from root? and why is empty? Do you have snort installed? Wichert. -- _ / Nothing is fool-proof to a sufficiently talented fool \ | [EMAIL PROTECTED] http://www.liacs.nl/~wichert/ | | 1024D/2FA3BC2D 576E 100B 518D 2F16 36B0 2805 3CB8 9250 2FA3 BC2D |
Re: Hi :>
Please let me know also, because I have been getting empty messages from root too On Thu, 18 Oct 2001, Tom Breza wrote: >Date: Thu, 18 Oct 2001 19:46:01 +0100 (BST) >From: Tom Breza <[EMAIL PROTECTED]> >To: debian-security@lists.debian.org >Subject: Hi :> >Resent-From: debian-security@lists.debian.org > > >Hi I got this today in my mail box, this is generated by somthing but I >don't know what is it? Why I got message from root? and why is empty? >also is strage a X-UIDL, >what can generate that kind of mail and why is empty? > >Tom > >Type Bits/KeyIDDate User ID >pub 1024/0B22D0E1 2001/09/23 Tom Breza <[EMAIL PROTECTED]> > >-BEGIN PGP PUBLIC KEY BLOCK- >Version: 2.6.3ia > >mQCNAzuuMNoAAAEEAOa8EvOztpYuHXxwb/NZVjDmXbutOK6wqF29SAnoXkiHB0ta >fGrNgcPPJoryN+291o4nxMWE2fCYNuArS8+0m9zMA5829QV2lSkkbrRXR2LLVYc4 >1bpubOom2DD2Qi+kHHYEFHdczavFxfGeQgbDCceF7uM3G5lGMxGsydsLItDhAAUR >tCNUb20gQnJlemEgPFRvbUBQQ1NlcnZpY2UtTkVULmNvLnVrPokAlQMFEDuuMNoR >rMnbCyLQ4QEBMA4EALUdA5IKzjSNVlVtRbpuuhZc4pf1qJuDn0bdSIg9vPmadXNS >uoqZn5UY8inYgx06y2RwsAf2o7ncyC33mf7cmcQ3Z6g9mfvHXPC+azfbb+RLc5be >pE3qYm1zvfQzzFT+Z4U1YvuNNfmASBsANo1ulR3rAYqKKtBMkwC1hFEysXlN >=dZ9o >-END PGP PUBLIC KEY BLOCK- > >-- Forwarded message -- >Envelope-to: [EMAIL PROTECTED] >Received: from localhost ([127.0.0.1]) > by laptop with esmtp (Exim 3.32 #1 (Debian)) > id 15u6Et-0003cm-01 > for <[EMAIL PROTECTED]>; Thu, 18 Oct 2001 07:01:07 +0100 >Received: from 192.168.253.254 [192.168.253.254] > by localhost with POP3 (fetchmail-5.9.0) > for [EMAIL PROTECTED] (single-drop); Thu, 18 Oct 2001 07:01:07 +0100 > (BST) >Received: from root by router with local (Exim 3.22 #1 (Debian)) > id 15u5g1-JF-00 > for <[EMAIL PROTECTED]>; Thu, 18 Oct 2001 06:25:05 +0100 >Message-Id: <[EMAIL PROTECTED]> >From: root <[EMAIL PROTECTED]> >To: [EMAIL PROTECTED] >Date: Thu, 18 Oct 2001 06:25:05 +0100 >X-UIDL: iX2"!]6*!!\]2!!UV/"! > > > > >
Hi :>
Hi I got this today in my mail box, this is generated by somthing but I don't know what is it? Why I got message from root? and why is empty? also is strage a X-UIDL, what can generate that kind of mail and why is empty? Tom Type Bits/KeyIDDate User ID pub 1024/0B22D0E1 2001/09/23 Tom Breza <[EMAIL PROTECTED]> -BEGIN PGP PUBLIC KEY BLOCK- Version: 2.6.3ia mQCNAzuuMNoAAAEEAOa8EvOztpYuHXxwb/NZVjDmXbutOK6wqF29SAnoXkiHB0ta fGrNgcPPJoryN+291o4nxMWE2fCYNuArS8+0m9zMA5829QV2lSkkbrRXR2LLVYc4 1bpubOom2DD2Qi+kHHYEFHdczavFxfGeQgbDCceF7uM3G5lGMxGsydsLItDhAAUR tCNUb20gQnJlemEgPFRvbUBQQ1NlcnZpY2UtTkVULmNvLnVrPokAlQMFEDuuMNoR rMnbCyLQ4QEBMA4EALUdA5IKzjSNVlVtRbpuuhZc4pf1qJuDn0bdSIg9vPmadXNS uoqZn5UY8inYgx06y2RwsAf2o7ncyC33mf7cmcQ3Z6g9mfvHXPC+azfbb+RLc5be pE3qYm1zvfQzzFT+Z4U1YvuNNfmASBsANo1ulR3rAYqKKtBMkwC1hFEysXlN =dZ9o -END PGP PUBLIC KEY BLOCK- -- Forwarded message -- Envelope-to: [EMAIL PROTECTED] Received: from localhost ([127.0.0.1]) by laptop with esmtp (Exim 3.32 #1 (Debian)) id 15u6Et-0003cm-01 for <[EMAIL PROTECTED]>; Thu, 18 Oct 2001 07:01:07 +0100 Received: from 192.168.253.254 [192.168.253.254] by localhost with POP3 (fetchmail-5.9.0) for [EMAIL PROTECTED] (single-drop); Thu, 18 Oct 2001 07:01:07 +0100 (BST) Received: from root by router with local (Exim 3.22 #1 (Debian)) id 15u5g1-JF-00 for <[EMAIL PROTECTED]>; Thu, 18 Oct 2001 06:25:05 +0100 Message-Id: <[EMAIL PROTECTED]> From: root <[EMAIL PROTECTED]> To: [EMAIL PROTECTED] Date: Thu, 18 Oct 2001 06:25:05 +0100 X-UIDL: iX2"!]6*!!\]2!!UV/"!
Re: Hi :>
Previously Tom Breza wrote: > No I don't have a snort in the system > Any other sugestions? Can't think of anything. Check the email timings to see if the correspond to a crontab maybe. Wichert. -- _ / Nothing is fool-proof to a sufficiently talented fool \ | [EMAIL PROTECTED] http://www.liacs.nl/~wichert/ | | 1024D/2FA3BC2D 576E 100B 518D 2F16 36B0 2805 3CB8 9250 2FA3 BC2D | -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
Re: Hi :>
* Tom Breza <[EMAIL PROTECTED]> [2001.10.18 21:26:17+0100]: > but I don't have a snort, and this message I got second times, first time > I benn to busy and just ignore, but that seems to be repeat... what time? if 6am'ish, then try all you cron.daily scripts by hand and see which one emails you (tail -f /var/log/mail.log). -- martin; (greetings from the heart of the sun.) \ echo mailto: !#^."<*>"|tr "<*> mailto:"; net@madduck "it is the mark of an educated mind to be able to entertain a thought without accepting it." -- aristoteles PGP signature
Re: Hi :>
> > * [EMAIL PROTECTED] <[EMAIL PROTECTED]> [2001.10.18 15:02:19-0400]: > > Please let me know also, > > because I have been getting empty messages from root too > > snort in stable and in testing seems to do this out of the box. > however, the UID *is* weird... but I don't have a snort, and this message I got second times, first time I benn to busy and just ignore, but that seems to be repeat... Tom -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
Re: Hi :>
> > Previously Tom Breza wrote: > > Hi I got this today in my mail box, this is generated by somthing but I > > don't know what is it? Why I got message from root? and why is empty? > > Do you have snort installed? Hi Wichert No I don't have a snort in the system Any other sugestions? Tom > > -- > _ > / Nothing is fool-proof to a sufficiently talented fool \ > | [EMAIL PROTECTED] http://www.liacs.nl/~wichert/ | > | 1024D/2FA3BC2D 576E 100B 518D 2F16 36B0 2805 3CB8 9250 2FA3 BC2D | > > > -- > To UNSUBSCRIBE, email to [EMAIL PROTECTED] > with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED] > > > > > > -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
Re: Hi :>
* [EMAIL PROTECTED] <[EMAIL PROTECTED]> [2001.10.18 15:02:19-0400]: > Please let me know also, > because I have been getting empty messages from root too snort in stable and in testing seems to do this out of the box. however, the UID *is* weird... -- martin; (greetings from the heart of the sun.) \ echo mailto: !#^."<*>"|tr "<*> mailto:"; net@madduck i took an iq test and the results were negative. PGP signature
Re: Hi :>
Previously Tom Breza wrote: > Hi I got this today in my mail box, this is generated by somthing but I > don't know what is it? Why I got message from root? and why is empty? Do you have snort installed? Wichert. -- _ / Nothing is fool-proof to a sufficiently talented fool \ | [EMAIL PROTECTED] http://www.liacs.nl/~wichert/ | | 1024D/2FA3BC2D 576E 100B 518D 2F16 36B0 2805 3CB8 9250 2FA3 BC2D | -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
Re: Hi :>
Please let me know also, because I have been getting empty messages from root too On Thu, 18 Oct 2001, Tom Breza wrote: >Date: Thu, 18 Oct 2001 19:46:01 +0100 (BST) >From: Tom Breza <[EMAIL PROTECTED]> >To: [EMAIL PROTECTED] >Subject: Hi :> >Resent-From: [EMAIL PROTECTED] > > >Hi I got this today in my mail box, this is generated by somthing but I >don't know what is it? Why I got message from root? and why is empty? >also is strage a X-UIDL, >what can generate that kind of mail and why is empty? > >Tom > >Type Bits/KeyIDDate User ID >pub 1024/0B22D0E1 2001/09/23 Tom Breza <[EMAIL PROTECTED]> > >-BEGIN PGP PUBLIC KEY BLOCK- >Version: 2.6.3ia > >mQCNAzuuMNoAAAEEAOa8EvOztpYuHXxwb/NZVjDmXbutOK6wqF29SAnoXkiHB0ta >fGrNgcPPJoryN+291o4nxMWE2fCYNuArS8+0m9zMA5829QV2lSkkbrRXR2LLVYc4 >1bpubOom2DD2Qi+kHHYEFHdczavFxfGeQgbDCceF7uM3G5lGMxGsydsLItDhAAUR >tCNUb20gQnJlemEgPFRvbUBQQ1NlcnZpY2UtTkVULmNvLnVrPokAlQMFEDuuMNoR >rMnbCyLQ4QEBMA4EALUdA5IKzjSNVlVtRbpuuhZc4pf1qJuDn0bdSIg9vPmadXNS >uoqZn5UY8inYgx06y2RwsAf2o7ncyC33mf7cmcQ3Z6g9mfvHXPC+azfbb+RLc5be >pE3qYm1zvfQzzFT+Z4U1YvuNNfmASBsANo1ulR3rAYqKKtBMkwC1hFEysXlN >=dZ9o >-END PGP PUBLIC KEY BLOCK- > >-- Forwarded message -- >Envelope-to: tom@localhost >Received: from localhost ([127.0.0.1]) > by laptop with esmtp (Exim 3.32 #1 (Debian)) > id 15u6Et-0003cm-01 > for ; Thu, 18 Oct 2001 07:01:07 +0100 >Received: from 192.168.253.254 [192.168.253.254] > by localhost with POP3 (fetchmail-5.9.0) > for tom@localhost (single-drop); Thu, 18 Oct 2001 07:01:07 +0100 (BST) >Received: from root by router with local (Exim 3.22 #1 (Debian)) > id 15u5g1-JF-00 > for <[EMAIL PROTECTED]>; Thu, 18 Oct 2001 06:25:05 +0100 >Message-Id: >From: root <[EMAIL PROTECTED]> >To: [EMAIL PROTECTED] >Date: Thu, 18 Oct 2001 06:25:05 +0100 >X-UIDL: iX2"!]6*!!\]2!!UV/"! > > > > > -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
Hi :>
Hi I got this today in my mail box, this is generated by somthing but I don't know what is it? Why I got message from root? and why is empty? also is strage a X-UIDL, what can generate that kind of mail and why is empty? Tom Type Bits/KeyIDDate User ID pub 1024/0B22D0E1 2001/09/23 Tom Breza <[EMAIL PROTECTED]> -BEGIN PGP PUBLIC KEY BLOCK- Version: 2.6.3ia mQCNAzuuMNoAAAEEAOa8EvOztpYuHXxwb/NZVjDmXbutOK6wqF29SAnoXkiHB0ta fGrNgcPPJoryN+291o4nxMWE2fCYNuArS8+0m9zMA5829QV2lSkkbrRXR2LLVYc4 1bpubOom2DD2Qi+kHHYEFHdczavFxfGeQgbDCceF7uM3G5lGMxGsydsLItDhAAUR tCNUb20gQnJlemEgPFRvbUBQQ1NlcnZpY2UtTkVULmNvLnVrPokAlQMFEDuuMNoR rMnbCyLQ4QEBMA4EALUdA5IKzjSNVlVtRbpuuhZc4pf1qJuDn0bdSIg9vPmadXNS uoqZn5UY8inYgx06y2RwsAf2o7ncyC33mf7cmcQ3Z6g9mfvHXPC+azfbb+RLc5be pE3qYm1zvfQzzFT+Z4U1YvuNNfmASBsANo1ulR3rAYqKKtBMkwC1hFEysXlN =dZ9o -END PGP PUBLIC KEY BLOCK- -- Forwarded message -- Envelope-to: tom@localhost Received: from localhost ([127.0.0.1]) by laptop with esmtp (Exim 3.32 #1 (Debian)) id 15u6Et-0003cm-01 for ; Thu, 18 Oct 2001 07:01:07 +0100 Received: from 192.168.253.254 [192.168.253.254] by localhost with POP3 (fetchmail-5.9.0) for tom@localhost (single-drop); Thu, 18 Oct 2001 07:01:07 +0100 (BST) Received: from root by router with local (Exim 3.22 #1 (Debian)) id 15u5g1-JF-00 for <[EMAIL PROTECTED]>; Thu, 18 Oct 2001 06:25:05 +0100 Message-Id: From: root <[EMAIL PROTECTED]> To: [EMAIL PROTECTED] Date: Thu, 18 Oct 2001 06:25:05 +0100 X-UIDL: iX2"!]6*!!\]2!!UV/"! -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
Re: hi, any help ? about an evil mysterious crazy Open tcp port ?
> how, can i see the tcp port 4350 that states to be opened useing nmap There is _the_ official document of registered ports at http://www.iana.org/assignments/port-numbers and it claims 4350 is "Net Device" - what ever that means. The entry is created by microsoft so we may assume it is some windows stuff. This does not preclude the possibility of a backdoor/trojan, though: a wise backdoor would listen on a port which would be open anyway thus concealing (partly) its presence. -- --- | Juha Jäykkä, [EMAIL PROTECTED]| | home: http://www.utu.fi/~juolja/ | ---
Re: hi, any help ? about an evil mysterious crazy Open tcp port ?
> how, can i see the tcp port 4350 that states to be opened useing nmap There is _the_ official document of registered ports at http://www.iana.org/assignments/port-numbers and it claims 4350 is "Net Device" - what ever that means. The entry is created by microsoft so we may assume it is some windows stuff. This does not preclude the possibility of a backdoor/trojan, though: a wise backdoor would listen on a port which would be open anyway thus concealing (partly) its presence. -- --- | Juha Jäykkä, [EMAIL PROTECTED]| | home: http://www.utu.fi/~juolja/ | --- -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
Re: hi, any help ? about an evil mysterious crazy Open tcp port ?
Hello, On Tue, May 29, 2001 at 03:05:52AM +0300, killah wrote: > how, can i see the tcp port 4350 that states to be opened useing nmap As root, you can do: fuser -v -n tcp 4350 and: lsof -i tcp:4350 The lsof command, if it finds anything, will return a PID as part of it's output, you can then see the files used by that process with: lsof -p Regards, Robert
Re: hi, any help ? about an evil mysterious crazy Open tcp port ?
killah writes: how, can i see the tcp port 4350 that states to be opened useing nmap what is his proccess and which file is it's owned ? You can use the "lsof" command to see what processes is bound to a given port. As I recall, it would be "lsof -i TCP:4350" and "lsof -i UDP:4350", but don't quote me; check your local man page. P.S. - you might need to install lsof. Ken Seefried, CISSP
hi, any help ? about an evil mysterious crazy Open tcp port ?
how, can i see the tcp port 4350 that states to be opened useing nmap what is his proccess and which file is it's owned ? doing ps with many different parameters doesn't saw me any unusual. maybe guys you can help me. Also after connecting with netcat to that port, seems closed and when i am repeating portscanning that port is seems closed. Please send me help... -greetz killah
Re: hi, any help ? about an evil mysterious crazy Open tcp port ?
Hello, On Tue, May 29, 2001 at 03:05:52AM +0300, killah wrote: > how, can i see the tcp port 4350 that states to be opened useing nmap As root, you can do: fuser -v -n tcp 4350 and: lsof -i tcp:4350 The lsof command, if it finds anything, will return a PID as part of it's output, you can then see the files used by that process with: lsof -p Regards, Robert -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
Re: hi, any help ? about an evil mysterious crazy Open tcp port ?
killah writes: > how, can i see the tcp port 4350 that states to be opened useing nmap > what is his proccess and which file is it's owned ? > You can use the "lsof" command to see what processes is bound to a given port. As I recall, it would be "lsof -i TCP:4350" and "lsof -i UDP:4350", but don't quote me; check your local man page. P.S. - you might need to install lsof. Ken Seefried, CISSP -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
hi, any help ? about an evil mysterious crazy Open tcp port ?
how, can i see the tcp port 4350 that states to be opened useing nmap what is his proccess and which file is it's owned ? doing ps with many different parameters doesn't saw me any unusual. maybe guys you can help me. Also after connecting with netcat to that port, seems closed and when i am repeating portscanning that port is seems closed. Please send me help... -greetz killah -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
