Re: [luau] File system help

2003-10-12 Thread Vince Hoang
On Sat, Oct 11, 2003 at 04:24:11PM -1000, Ben Beeson wrote:
 $ mount | grep ext
 /dev/sda2 on / type ext3 (rw)
 /dev/sda1 on /boot type ext3 (rw)
 /dev/sdb2 on /home type ext3 (rw)
 /dev/sdb1 on /usr type ext3 (rw)

...

 EXT2-fs warning (device sd(8,2)): ext2_read_super: mounting ext3 filesystem 
 as ext2

Where is the fs that is mounted ext2? Despite the warning in
dmesg, they are mounted ext3.

-Vince


Re: [luau] Looking for help on attempted cracking....

2003-10-12 Thread Vince Hoang
On Sat, Oct 11, 2003 at 09:47:35PM -1000, Ben Beeson wrote:
  1) How did the cracker get past the firewall?

Is SSH open and unpatched? I bet it is.

  2) Does this represent a hole that can be plugged?

You can plug it up, but there are no guarantees a backdoor was
not left behind.

  3) What else should I check or do to make sure that I'm not
 owned by someone but me?

Completely reinstall your system, installing only what you know
you need.

Update all your packages.

  4) How can I keep this person out in the future?

Keep your system updated.

Read up on file integrity scanners. Audit your filesystem regularly.

How do you know the firewall script worked? Do not just run a
script and expect it to work the way your think it supoosed to
work. Verify.

-Vince


Re: [luau] Digital Video Editting in Linux

2003-10-12 Thread Hawaii Linux Institute

Wow, I am impressed!  Thanks for the info.

As I mentioned to Vince (see attached*), the purpose of my thought is 
not about making films, but about baby-sitting one or more of the 
open-sourced projects.  In short, I only have a very narrowly focused 
goal at the present time, i.e., to try to run Jahshaka (free) or 
MainActor (not free) on Warren's platform (i.e., Fedora Linux).  The 
scope of this project can expand, if I see promise--or you or someone 
else can branch/take over, etc.  The advantage of working with Olela is 
that their have the front end equipment as well as a studio and tons of 
people to interact with, plus it operates until 9 PM.



*Thanks.  Jahshaka is still in the alpha stage, and we all know how 
raw an open-sourced program can be before it becomes mainstream.  Thus, 
there is no need to make a big deal at present.  Just need one or two 
volunteers, with or without Linux experience, who are willing to 
patiently go through the beta testing rituals and are unafraid to take 
abuses/ridicules from those Mac people.  (Most Olelo techs are 
volunteers, they are very nice people but worship Macs religiously.)


In order to use Olelo equipment, the volunteers must go through a set of 
courses and be certified.  The tuitions are trivial but I will pick them 
up.  Digital video editting seems to be one of the best hopes to get our 
community really really interested in Linux.  But again, the available 
tools are still very primitive.  Time is our best friend.  Wayne




[luau] Upgrading Perl.

2003-10-12 Thread Camron W. Fox
Alle,

Does anyone know where to find a good howto on upgrading perl from the
installation default 5.6.1 to 5.8.X on RH7.3?

Best Regards,
Camron

Camron W. Fox
Hilo Office
High Performance Computing Group
Fujitsu America, INC.
E-mail: [EMAIL PROTECTED]




RE: [luau] Looking for help on attempted cracking....

2003-10-12 Thread Randall Oshita
box in the /home/ftp/pub/.. area.  So far, it does not appear to have been

was FTP running? you have anon accounts?
did you KNOW ftp was running?
winmail.dat

Re: [luau] File system help

2003-10-12 Thread Ben Beeson
Vince,

That's the rub, I can't figure it out.  I guess I can safely ignore 
this one?

Ben 

 Where is the fs that is mounted ext2? Despite the warning in
 dmesg, they are mounted ext3.

 -Vince


Re: [luau] Looking for help on attempted cracking....

2003-10-12 Thread Ben Beeson
Vince,

SSH is closed on the firewall, although it is running on my box. As far 
as 
keeping my box updated goes, I regularly run up2date among other things.   
While I realize that that may not cover everything, so far it has served me 
well (until now that is...) 

I'll work on a better way to verify that my firewall script is working. 
 
Typically, I check the boot logs to make sure that it loads when I do boot, 
and I am seeing log entries where the firewall is blocking various IPs when 
certain rules are matched.  From that I gather that the firewall is working, 
but as you can see here, it appears that on at least this occasion, it did 
not stop a connction to my ftp directory that it should have.  

Reinstall coming very soon

Thanks,

Ben 



 

On Sunday 12 October 2003 09:09 am, you wrote:
 On Sat, Oct 11, 2003 at 09:47:35PM -1000, Ben Beeson wrote:
   1) How did the cracker get past the firewall?

 Is SSH open and unpatched? I bet it is.

   2) Does this represent a hole that can be plugged?

 You can plug it up, but there are no guarantees a backdoor was
 not left behind.

   3) What else should I check or do to make sure that I'm not
  owned by someone but me?

 Completely reinstall your system, installing only what you know
 you need.

 Update all your packages.

   4) How can I keep this person out in the future?

 Keep your system updated.

 Read up on file integrity scanners. Audit your filesystem regularly.

 How do you know the firewall script worked? Do not just run a
 script and expect it to work the way your think it supoosed to
 work. Verify.

 -Vince
 ___
 LUAU mailing list
 [EMAIL PROTECTED]
 http://videl.ics.hawaii.edu/mailman/listinfo/luau