[GNHLUG] No August 2012 SLUG meeting

2012-08-06 Thread Robert Anderson
I will be out of town during the normal 2nd Monday SLUG meeting this month.

The next SLUG meeting will be on the 10th of September 2012 (normal "2nd  
Monday" at 7pm).

Hope everyone is enjoying this HOT summer, or at least tolerating it!

-- 
Robert E. Anderson (603) 862-3489
Associate Director
Research Computing & Instrumentation 
___
gnhlug-announce mailing list
gnhlug-annou...@mail.gnhlug.org
http://mail.gnhlug.org/mailman/listinfo/gnhlug-announce/
___
gnhlug-discuss mailing list
gnhlug-discuss@mail.gnhlug.org
http://mail.gnhlug.org/mailman/listinfo/gnhlug-discuss/


Re: [GNHLUG] GNHLUG and Drupal BBQ parties: Sept 8 and Aug 25

2012-08-06 Thread Seth Cohn
On Mon, Aug 6, 2012 at 1:43 PM, Ben Scott  wrote:
> Who  : You!  Your fiends!  Everybody!
> What : BBQ Parties
> Where: Miles Smith Farm, Loudon, NH
>
> What : NH Drupal Group party (with all others welcome)
> Date : Saturday, August 25, 2012
> Time : 2:30 PM to 8:30 PM (or whenever everyone leaves)

fb event: http://www.facebook.com/events/456253231061567
(If fb sends https requests to your machine, douse in BBQ and consume
the packets)

Seth


>
> What : GNHLUG party (with all others welcome)
> Date : Saturday, September 8, 2012
> Time : Afternoon/evening (exact time TBD)
>
>   Bruce Dawson and Carole Soule have extra-generously offered to host
> not one but *two* BBQ/parties.  Further, the NH Drupal Group have
> extended an invitation to GNHLUGers and other Unix and Free Software
> fans in the area to join them at their party.
>
>   Information on the Drupal event is available here:
>
> http://groups.drupal.org/node/243993
>
>   Please RSVP there, and coordinate any shared food you might want to
> bring with the organizers.  There was already a buy-in for some food,
> so we want to avoid duplication there.
>
>   Information on the GNHLUG event to follow Real Soon Now.
>
> -- Ben
> ___
> gnhlug-announce mailing list
> gnhlug-annou...@mail.gnhlug.org
> http://mail.gnhlug.org/mailman/listinfo/gnhlug-announce/
> ___
> gnhlug-discuss mailing list
> gnhlug-discuss@mail.gnhlug.org
> http://mail.gnhlug.org/mailman/listinfo/gnhlug-discuss/
___
gnhlug-discuss mailing list
gnhlug-discuss@mail.gnhlug.org
http://mail.gnhlug.org/mailman/listinfo/gnhlug-discuss/


[GNHLUG] GNHLUG and Drupal BBQ parties: Sept 8 and Aug 25

2012-08-06 Thread Ben Scott
Who  : You!  Your fiends!  Everybody!
What : BBQ Parties
Where: Miles Smith Farm, Loudon, NH

What : NH Drupal Group party (with all others welcome)
Date : Saturday, August 25, 2012
Time : 2:30 PM to 8:30 PM (or whenever everyone leaves)

What : GNHLUG party (with all others welcome)
Date : Saturday, September 8, 2012
Time : Afternoon/evening (exact time TBD)

  Bruce Dawson and Carole Soule have extra-generously offered to host
not one but *two* BBQ/parties.  Further, the NH Drupal Group have
extended an invitation to GNHLUGers and other Unix and Free Software
fans in the area to join them at their party.

  Information on the Drupal event is available here:

http://groups.drupal.org/node/243993

  Please RSVP there, and coordinate any shared food you might want to
bring with the organizers.  There was already a buy-in for some food,
so we want to avoid duplication there.

  Information on the GNHLUG event to follow Real Soon Now.

-- Ben
___
gnhlug-announce mailing list
gnhlug-annou...@mail.gnhlug.org
http://mail.gnhlug.org/mailman/listinfo/gnhlug-announce/
___
gnhlug-discuss mailing list
gnhlug-discuss@mail.gnhlug.org
http://mail.gnhlug.org/mailman/listinfo/gnhlug-discuss/


Re: HTTPS connection attempts from Facebook?

2012-08-06 Thread Michael ODonnell


>> When you say "nuke the connection attempt" do you mean
>> [...]
>
>Nuke as in (continue to) deny the connection attempt.

Cool.

Hmmm, I did end up in a situation recently (and reluctantly)
where I was obliged to install a Firefox add-in involved
with use of MacroMedia's AdobeConnect (grrr!  don't even
get me started griping about *that* little bit of hell...)
though the other party was not Facebook so it didn't occur to
me that there might be a connection.  But now that I think of
it I might have read some war stories about debugging early
versions of that add-in and IIRC somebody might have mentioned
that opening up port 443 on their firewall was somehow a remedy
for some problem, so maybe they're related...?  I don't get
the Facebook connection but then so many WWW sites these days have
been rigged with XSS attacks^H^H^H^H^H^H^H "Like us on Facebook!"
buttons that one never knows...

___
gnhlug-discuss mailing list
gnhlug-discuss@mail.gnhlug.org
http://mail.gnhlug.org/mailman/listinfo/gnhlug-discuss/


Re: [GNHLUG] What day should the GNHLUG BBQ be?

2012-08-06 Thread Ben Scott
  Poll is closed.  No matter how you count the votes, Sat 8 Sept 2012
is the clear winner.

 http://doodle.com/vqk7sb8evznp6x8y

  Sept 8 was also the least-liked date in the first poll.  Go figure.

-- Ben
___
gnhlug-discuss mailing list
gnhlug-discuss@mail.gnhlug.org
http://mail.gnhlug.org/mailman/listinfo/gnhlug-discuss/


Re: HTTPS connection attempts from Facebook?

2012-08-06 Thread Ben Scott
On Mon, Aug 6, 2012 at 10:13 AM, Brian Chabot  wrote:
> The *only* reason Facebook should be contacting you this way is if you
> have an app set to pull data from there.

  Doesn't need to be an app.  A simple web link to a home IP address,
or name that resolves to same, will do it.  Facebook will try to
retrieve the page title and content for thumbnail/preview purposes.

https://www.facebook.com/externalhit_uatext.php

-- Ben
___
gnhlug-discuss mailing list
gnhlug-discuss@mail.gnhlug.org
http://mail.gnhlug.org/mailman/listinfo/gnhlug-discuss/


Re: HTTPS connection attempts from Facebook?

2012-08-06 Thread Brian Chabot
On Mon, Aug 6, 2012 at 11:31 AM, Michael ODonnell
 wrote:

> When you say "nuke the connection attempt" do you mean
> kill the process that's attempting to open the connection?
> I can't, because it's an inbound connection and that process is
> (apparently) somewhere inside Facebook.  I only have control
> over the response at my end which, in my case, is nothing at all
> since the port is blocked, with failed attempts logged as shown.

Nuke as in (continue to) deny the connection attempt.

Brian
___
gnhlug-discuss mailing list
gnhlug-discuss@mail.gnhlug.org
http://mail.gnhlug.org/mailman/listinfo/gnhlug-discuss/


Re: HTTPS connection attempts from Facebook?

2012-08-06 Thread Michael ODonnell


>> It's *just* a home connection?  No services?  Nuke the connection
>> attempt.
>
> If you're on a network with DHCP (most residential connections),
> it's possible someone else wrote an app that points to a DNS
> name that points to your IP address.  Still safe to nuke it.

When you say "nuke the connection attempt" do you mean
kill the process that's attempting to open the connection?
I can't, because it's an inbound connection and that process is
(apparently) somewhere inside Facebook.  I only have control
over the response at my end which, in my case, is nothing at all
since the port is blocked, with failed attempts logged as shown.

An nmap scan of the machines behind my firewall currently shows
nothing (legitimate or otherwise) listening on port 443, so
I don't have any suspects to "nuke" at the moment here inside
the walls.

I was mostly just wondering if these connection attempts are
examples of some intentional Facebook behavior, or whether I
should instead bring it to their attention as evidence that
one of their systems (or personnel) may have been compromised.

___
gnhlug-discuss mailing list
gnhlug-discuss@mail.gnhlug.org
http://mail.gnhlug.org/mailman/listinfo/gnhlug-discuss/


Re: HTTPS connection attempts from Facebook?

2012-08-06 Thread Mark Komarinski
On 8/6/12 10:13 AM, Brian Chabot wrote:
> On Mon, Aug 6, 2012 at 10:06 AM, Michael ODonnell
>  wrote:
>>   is there *ANY*
>> legitimate reason why anything should be attempting to connect
>> from Facebook to my home IP address, which offers no such
>> services?  I assume, of course, that the answer is "No".
> The *only* reason Facebook should be contacting you this way is if you
> have an app set to pull data from there.
>
> Possibilities that come to mind include RSS feeds and HTML embeds in
> Page info plus, of course, any custom stuff you may have written.
>
> It's *just* a home connection? No services?  Nuke the connection attempt.
>
If you're on a network with DHCP (most residential connections), it's 
possible someone else wrote an app that points to a DNS name that points 
to your IP address.  Still safe to nuke it.

-Mark
___
gnhlug-discuss mailing list
gnhlug-discuss@mail.gnhlug.org
http://mail.gnhlug.org/mailman/listinfo/gnhlug-discuss/


Re: HTTPS connection attempts from Facebook?

2012-08-06 Thread Brian Chabot
On Mon, Aug 6, 2012 at 10:06 AM, Michael ODonnell
 wrote:
>  is there *ANY*
> legitimate reason why anything should be attempting to connect
> from Facebook to my home IP address, which offers no such
> services?  I assume, of course, that the answer is "No".

The *only* reason Facebook should be contacting you this way is if you
have an app set to pull data from there.

Possibilities that come to mind include RSS feeds and HTML embeds in
Page info plus, of course, any custom stuff you may have written.

It's *just* a home connection? No services?  Nuke the connection attempt.

Brian
___
gnhlug-discuss mailing list
gnhlug-discuss@mail.gnhlug.org
http://mail.gnhlug.org/mailman/listinfo/gnhlug-discuss/


HTTPS connection attempts from Facebook?

2012-08-06 Thread Michael ODonnell

This is the second time this week that my firewall has reported
the following:

 [DoS Attack: ACK Scan] from source: 69.171.227.60, port 443, Sunday, August 
05,2012 20:25:40

The reported IP address is within a range owned by Facebook
and DNS shows a hostname that (FWIW) is at least plausibly in
keeping with corporate naming schemes.

I do have a Facebook account and may or may not have allowed
a "session" to remain active overnight, though I'll claim
that shouldn't matter as I ask the following: is there *ANY*
legitimate reason why anything should be attempting to connect
from Facebook to my home IP address, which offers no such
services?  I assume, of course, that the answer is "No".

___
gnhlug-discuss mailing list
gnhlug-discuss@mail.gnhlug.org
http://mail.gnhlug.org/mailman/listinfo/gnhlug-discuss/