Re: lug-bg: message log
Vladimir Paskov wrote: , , nmap . Sep 12 05:25:29 xpman sshd[13871]: Illegal user test from 218.36.49.208 Sep 12 05:25:29 xpman sshd[13871]: Failed password for illegal user test from 218.36.49.208 port 50161 ssh2 Sep 12 05:25:32 xpman sshd[13873]: Illegal user guest from 218.36.49.208 Sep 12 05:25:32 xpman sshd[13873]: Failed password for illegal user guest from 218.36.49.208 port 50279 ssh2 Sep 12 05:25:35 xpman sshd[13875]: Illegal user admin from 218.36.49.208 Sep 12 05:25:35 xpman sshd[13875]: Failed password for illegal user admin from 218.36.49.208 port 50350 ssh2 On Sun, 2004-09-19 at 01:13 +0300, Vladimir Paskov wrote: , /var/log/messages: Sep 18 23:58:44 xpman sshd[5562]: Invalid user test from 221.0.193.23 Sep 18 23:58:44 xpman sshd[5562]: Failed password for invalid user test from 221.0.193.23 port 44298 ssh2 Sep 18 23:58:48 xpman sshd[5564]: Invalid user guest from 221.0.193.23 Sep 18 23:58:48 xpman sshd[5564]: Failed password for invalid user guest from 221.0.193.23 port 44393 ssh2 Sep 18 23:58:52 xpman sshd[5566]: Invalid user admin from 221.0.193.23 Sep 18 23:58:52 xpman sshd[5566]: Failed password for invalid user admin from 221.0.193.23 port 44472 ssh2 Sep 18 23:58:58 xpman sshd[5568]: Invalid user admin from 221.0.193.23 Sep 18 23:58:58 xpman sshd[5568]: Failed password for invalid user admin from 221.0.193.23 port 44549 ssh2 Sep 18 23:59:05 xpman sshd[5570]: Invalid user user from 221.0.193.23 Sep 18 23:59:05 xpman sshd[5570]: Failed password for invalid user user from 221.0.193.23 port 44659 ssh2 Sep 18 23:59:10 xpman sshd[5572]: Failed password for root from 221.0.193.23 port 44784 ssh2 Sep 18 23:59:14 xpman sshd[5574]: Failed password for root from 221.0.193.23 port 44876 ssh2 Sep 18 23:59:19 xpman sshd[5576]: Failed password for root from 221.0.193.23 port 44967 ssh2 Sep 18 23:59:23 xpman sshd[5581]: Invalid user test from 221.0.193.23 Sep 18 23:59:23 xpman sshd[5581]: Failed password for invalid user test from 221.0.193.23 port 45045 ssh2 , , ? . . A mail-list of Linux Users Group - Bulgaria (bulgarian linuxers). http://www.linux-bulgaria.org - Hosted by Internet Group Ltd. - Stara Zagora To unsubscribe: http://www.linux-bulgaria.org/public/mail_list.html towa e brutforce exploit za sshd , raboti na principa na dictionary based words , i prawi okolo 09482493 checka za edna minuta :) taka che ako imate paroli koito sa dictionary based , i ako ste dopusnali greshkata da ostawite PermitRootLogin Yes (v sshd_config) , shte vi se sluchi towa koeto se sluchi na men s edna mashina (chiato root parola beshe password :)) spasenieto za towa e mnogo lesno , /etc/hosts.deny , ili polzwai netfilter iptables/ipchains Best Regards, Danail Petrow ... P.s. izvinete me za shliokavicata , chak sega se usetih che ne pisha na kirilica , a me murzi da go prepiswam na-nowo :) A mail-list of Linux Users Group - Bulgaria (bulgarian linuxers). http://www.linux-bulgaria.org - Hosted by Internet Group Ltd. - Stara Zagora To unsubscribe: http://www.linux-bulgaria.org/public/mail_list.html
Re: lug-bg: message log
, , nmap . : http://www.k-otik.com/exploits/08202004.brutessh2.c.php : the first brutessh was only for users guest test. brutessh2 is a brute for sshd port wich atempts to login as root trying more than 2000 passwords for it. users guest , test , nobody and admin with no passwords are included. A mail-list of Linux Users Group - Bulgaria (bulgarian linuxers). http://www.linux-bulgaria.org - Hosted by Internet Group Ltd. - Stara Zagora To unsubscribe: http://www.linux-bulgaria.org/public/mail_list.html
Re: lug-bg: iptables SNAT --to pool ...
, ( ) : undertown:~# uname -a Linux undertown 2.4.27 #2 Sun Sep 19 09:30:40 EDT 2004 i686 GNU/Linux Best Regards, A mail-list of Linux Users Group - Bulgaria (bulgarian linuxers). http://www.linux-bulgaria.org - Hosted by Internet Group Ltd. - Stara Zagora To unsubscribe: http://www.linux-bulgaria.org/public/mail_list.html
lug-bg: /etc/fstab
, . 2 (hda hdd), ntfs, 1 vfat, 1 linux native 1 swap. .Slack 10.0 , user,uid=,gid=??? fstab... ! Fat ntfs-a . -. knoppix, , fstab , . ,:). . A mail-list of Linux Users Group - Bulgaria (bulgarian linuxers). http://www.linux-bulgaria.org - Hosted by Internet Group Ltd. - Stara Zagora To unsubscribe: http://www.linux-bulgaria.org/public/mail_list.html
lug-bg: LTSP + Mosix
Linux. LTSP. : : LTSP + Mosix e - . . 1 LTSP Server: OS - Debian (Knoppix 3.6), LTSP 4.1 CPU - 2Ghz Celeron RAM - 1024Mb HDD - 80 GB 8 Terminali: CPU PII 350 Mhz RAM - 64 Mb . firefox, openoffice, xchat t.e. . A mail-list of Linux Users Group - Bulgaria (bulgarian linuxers). http://www.linux-bulgaria.org - Hosted by Internet Group Ltd. - Stara Zagora To unsubscribe: http://www.linux-bulgaria.org/public/mail_list.html
Re: lug-bg: message log
On Sun, 19 Sep 2004 01:13:01 +0300; Vladimir Paskov wrote: , /var/log/messages: [cut] , , ? . script-kiddies... config sshd ssh.root. ( 6'?\io_Z), - , passphrase -. ssh, IP . . A mail-list of Linux Users Group - Bulgaria (bulgarian linuxers). http://www.linux-bulgaria.org - Hosted by Internet Group Ltd. - Stara Zagora To unsubscribe: http://www.linux-bulgaria.org/public/mail_list.html
Re: lug-bg: LTSP + Mosix
On Sun, 19 Sep 2004 10:15:40 +0300 (EEST); [EMAIL PROTECTED] wrote: Linux. LTSP. : : LTSP + Mosix e - . . 1 LTSP Server: OS - Debian (Knoppix 3.6), LTSP 4.1 CPU - 2Ghz Celeron RAM - 1024Mb HDD - 80 GB 8 Terminali: CPU PII 350 Mhz RAM - 64 Mb . firefox, openoffice, xchat t.e. . Disclaimer , . /Disclaimer . - . bottleneck, . ( ??) , , , . , ., .. ..... A mail-list of Linux Users Group - Bulgaria (bulgarian linuxers). http://www.linux-bulgaria.org - Hosted by Internet Group Ltd. - Stara Zagora To unsubscribe: http://www.linux-bulgaria.org/public/mail_list.html
Re: lug-bg: message log
Peter Georgiev wrote: , passphrase -. :) :))) ... :) :) A mail-list of Linux Users Group - Bulgaria (bulgarian linuxers). http://www.linux-bulgaria.org - Hosted by Internet Group Ltd. - Stara Zagora To unsubscribe: http://www.linux-bulgaria.org/public/mail_list.html
Re: lug-bg: message log
On Sun, 19 Sep 2004 11:51:22 +0300; Vesselin Kolev wrote: :) :))) ... :) :) ! ! ;) A mail-list of Linux Users Group - Bulgaria (bulgarian linuxers). http://www.linux-bulgaria.org - Hosted by Internet Group Ltd. - Stara Zagora To unsubscribe: http://www.linux-bulgaria.org/public/mail_list.html
Re: lug-bg: message log
Danail Petrow wrote: spasenieto za towa e mnogo lesno , /etc/hosts.deny :). :)) , , . /etc/host.deny , / . , ( , web )? NAT :) . . - : 1), SSH ( DROP, timeout , , ICMP port unreachable, , - ICMP,,, ). 2) - . 4096 . ( ), . - 1 . OpenSSH X.509 , , CRL OCSP . 3) SSHSSL.SSH , ( ). SSH ( ,SSH- , SSH ) SSH.- ., . 4) chroot SSH. chroot , . 5) . test . . 6) SSH . sftp,scponly . . , rekey - SSH (, , - ). 7)IPsec DMZ . - . A mail-list of Linux Users Group - Bulgaria (bulgarian linuxers). http://www.linux-bulgaria.org - Hosted by Internet Group Ltd. - Stara Zagora To unsubscribe: http://www.linux-bulgaria.org/public/mail_list.html
Re: lug-bg: message log
Peter Georgiev wrote: ! ! ;) :) :) , . , SSH . ,, . . - ,, , . . . ,, , - , ? , SSH , (.. ). . ,8 ,1024 . .. . , . ,LDAP , SSH . , . SSH SSH. SSH , . A mail-list of Linux Users Group - Bulgaria (bulgarian linuxers). http://www.linux-bulgaria.org - Hosted by Internet Group Ltd. - Stara Zagora To unsubscribe: http://www.linux-bulgaria.org/public/mail_list.html
Re: lug-bg: LTSP + Mosix
On Sunday 19 September 2004 11:48, Peter Georgiev wrote: --cut-- . firefox, openoffice, xchat t.e. . ;-) ... LTSP + (Open)Mosix : * / ( , , , UP SMP ) .., . firefox-a ;-) 21 ;-) OpenOffice-a .., , / * (). : http://www.lpmo.edu/~daniau/ltsp-mosix/ ;-) Why? some different reasons to choose this ltsp-mosix solution : 1. There are a lot of windows machines on your network, with good processors and memory that can be used at night for computation. With a simple floppy disk you can turn the windows computer into a Mosix node. 2. There is already a ltsp server on your network, and some Xterminals with CPU doing nearly nothing! 3. Ease of use : once your server is setup, it will only take 5 minutes to add a new node. . Disclaimer , . /Disclaimer . - . bottleneck, . ( ??) , , , . , ., .. . . :OpenOffice, , .. 1 , - cpu-. - . -- pub 4096R/0E4BD0AB 2003-03-18 keyserver.bu.edu ; pgp.mit.edu fingerprint 1AE7 7C66 0A26 5BFF DF22 5D55 1C57 0C89 0E4B D0AB A mail-list of Linux Users Group - Bulgaria (bulgarian linuxers). http://www.linux-bulgaria.org - Hosted by Internet Group Ltd. - Stara Zagora To unsubscribe: http://www.linux-bulgaria.org/public/mail_list.html
Re: lug-bg: LTSP + Mosix
, 2004-09-19 10:15, [EMAIL PROTECTED] : Linux. LTSP. : : LTSP + Mosix e - . . 1 LTSP Server: OS - Debian (Knoppix 3.6), LTSP 4.1 CPU - 2Ghz Celeron RAM - 1024Mb HDD - 80 GB 8 Terminali: CPU PII 350 Mhz RAM - 64 Mb . firefox, openoffice, xchat t.e. . , remote X - 3 , (p4/1.5, 512M ram), ,X- ( gdm). , ,screensaver, CPU (-), flash ( ). , mplayer- ,- xvideo, , X accelerator- . 8 - bottleneck, 100mbps . signature.asc Description: This is a digitally signed message part
Re: lug-bg: LTSP + Mosix
On Sunday 19 September 2004 11:48, Peter Georgiev wrote: --cut-- . firefox, openoffice, xchat t.e. . ;-) ... LTSP + (Open)Mosix : * / ( , , , UP SMP ) .., . firefox-a ;-) 21 ;-) OpenOffice-a .., , / * (). . LTSP OpenMosix ( , OpenMovix ... ). P II . .. - ( 100$, 3 ) . IE Explorer, Firefox Ctrl+N, . Linux Treminal Server-a. OpenMosix-a ... - ( Doom3 ... ... !!!) A mail-list of Linux Users Group - Bulgaria (bulgarian linuxers). http://www.linux-bulgaria.org - Hosted by Internet Group Ltd. - Stara Zagora To unsubscribe: http://www.linux-bulgaria.org/public/mail_list.html
Re: lug-bg: LTSP + Mosix
On Sunday 19 September 2004 16:21, [EMAIL PROTECTED] wrote: --cut-- . LTSP OpenMosix ( , OpenMovix ... ). P II . .. - ( 100$, 3 ) LTSP OpenMosix. T.e 2-3 OpenMosixSingle System Image ltsp , . , . . IE Explorer, Firefox Ctrl+N, . ;-) ? Linux Treminal Server-a. OpenMosix-a ... - ( Doom3 ... ... !!!) , __ SSI , . , , , , . -- pub 4096R/0E4BD0AB 2003-03-18 keyserver.bu.edu ; pgp.mit.edu fingerprint 1AE7 7C66 0A26 5BFF DF22 5D55 1C57 0C89 0E4B D0AB A mail-list of Linux Users Group - Bulgaria (bulgarian linuxers). http://www.linux-bulgaria.org - Hosted by Internet Group Ltd. - Stara Zagora To unsubscribe: http://www.linux-bulgaria.org/public/mail_list.html
Re: lug-bg: LTSP + Mosix
On Sun, 19 Sep 2004 16:21:23 +0300 (EEST); [EMAIL PROTECTED] wrote: Linux Treminal Server-a. OpenMosix-a ... - ( Doom3 ... ... !!!) . . Open Mosix,, CPU R, nod- . Doom - . , 3 ogg, grip lame, N 5 5 - 1. - , Beowulf , -. , . , . . , Mosix, OpenMosix, Beowulf, OSCAR... .: http://lcic.org/ A mail-list of Linux Users Group - Bulgaria (bulgarian linuxers). http://www.linux-bulgaria.org - Hosted by Internet Group Ltd. - Stara Zagora To unsubscribe: http://www.linux-bulgaria.org/public/mail_list.html
Re: lug-bg: LTSP + Mosix
On Sunday 19 September 2004 18:17, Peter Georgiev wrote: On Sun, 19 Sep 2004 16:21:23 +0300 (EEST); [EMAIL PROTECTED] wrote: Linux Treminal Server-a. OpenMosix-a ... - ( Doom3 ... ... !!!) . . Open Mosix,, CPU R, nod- . ;-) Doom - . , 3 ogg, grip lame, N 5 5 - 1. - , Beowulf , -. , . , . . ( )..., , -. , Mosix, OpenMosix, Beowulf, OSCAR... , ;-) : 1) Beowulf .. Message Passing ( message passing API- PVM MPI, ask google). ;-) . , , . It all depends upon the application. 5x5 = 20, ,PVM MPI . 2) Mosix, OpenMosixSingle System Image - ... posix .( , ) - ., , , Java green threads, shared memory... . 5x525,3 3000 . - , .. ... ;-) -- pub 4096R/0E4BD0AB 2003-03-18 keyserver.bu.edu ; pgp.mit.edu fingerprint 1AE7 7C66 0A26 5BFF DF22 5D55 1C57 0C89 0E4B D0AB A mail-list of Linux Users Group - Bulgaria (bulgarian linuxers). http://www.linux-bulgaria.org - Hosted by Internet Group Ltd. - Stara Zagora To unsubscribe: http://www.linux-bulgaria.org/public/mail_list.html
Re: lug-bg: LTSP + Mosix
LTSP OpenMosix. T.e 2-3 OpenMosixSingle System Image ltsp . ... ;-D) : mosrun nodo-. . IE Explorer, Firefox Ctrl+N, . ;-) ? 8 . Linux Treminal Server-a. OpenMosix-a ... - ( Doom3 ... ... !!!) , __ SSI , . , , , , . ... 8 ... ( ) -. ( -): ... A mail-list of Linux Users Group - Bulgaria (bulgarian linuxers). http://www.linux-bulgaria.org - Hosted by Internet Group Ltd. - Stara Zagora To unsubscribe: http://www.linux-bulgaria.org/public/mail_list.html
Re: lug-bg: mysql and SMP
, , , ... ... bogomips 200 bogomips - ... hardware , 6. ... :) . D A mail-list of Linux Users Group - Bulgaria (bulgarian linuxers). http://www.linux-bulgaria.org - Hosted by Internet Group Ltd. - Stara Zagora To unsubscribe: http://www.linux-bulgaria.org/public/mail_list.html
Re: lug-bg: LTSP + Mosix
On Sunday 19 September 2004 23:19, [EMAIL PROTECTED] wrote: LTSP OpenMosix. T.e 2-3 OpenMosixSingle System Image ltsp . ... ;-D) , LTSP utilities/packagesservices ( ) ( ;-) , , , 1-2 . : *OpenMosix cluster (1-2-3 openmosix kernel patch + userspace utilities,LTSP ) * OpenMosix+LTSP 3-4 LTSP servers, , . ,2-3 . ;-) OpenMosix, LTSP. : mosrun nodo-. mon load-a mosctl, moslimit , . . IE Explorer, Firefox Ctrl+N, . ;-) ? 8 . 8 ... 8. Linux Treminal Server-a. OpenMosix-a ... - ( Doom3 ... ... !!!) , __ SSI , . , , , , . ... 8 ... ( ) -. ( -): ... ;-),2-3 () = 8 ... , 1 , .. , ,1. . -- pub 4096R/0E4BD0AB 2003-03-18 keyserver.bu.edu ; pgp.mit.edu fingerprint 1AE7 7C66 0A26 5BFF DF22 5D55 1C57 0C89 0E4B D0AB A mail-list of Linux Users Group - Bulgaria (bulgarian linuxers). http://www.linux-bulgaria.org - Hosted by Internet Group Ltd. - Stara Zagora To unsubscribe: http://www.linux-bulgaria.org/public/mail_list.html
Re: lug-bg: message log
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On Sunday 19 September 2004 01:13 am, Vladimir Paskov wrote: , /var/log/messages: [cut] 221.0.193.23 port 44967 ssh2 Sep 18 23:59:23 xpman sshd[5581]: Invalid user test from 221.0.193.23 Sep 18 23:59:23 xpman sshd[5581]: Failed password for invalid user test from 221.0.193.23 port 45045 ssh2 , , ? . . . - . . , . 2 . PubkeyAuthentication SSL over SSH, firewall policy . / service . ? SSH? ?false sense of security . . port knocking ( ) workaround. SSH(53291), keys, .. () : [server] iptables -t filter -I INPUT -i $EXT_IFACE -p tcp -d $EXT_ADDR --dport 53291 - --sport 23 -j ACCEPT SSH 23 ( ). 2- . [client] iptables -t nat -I POSTROUTING -s $EXT_ADDR -d $TARGET_SRV -o $EXT_IFACE -p tcp --dport 53291 -j SNAT --to-source $EXT_ADDR:23 SSH 23. ,. , 53 0/0, ' DNS- ' :) . . .. ( , pre-shared secrets, etc), SonicWall/GlobalVPN; IPSec (roadwarrior). - -- :wq -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.6 (GNU/Linux) iD8DBQFBTc2qmCN1eSWR9owRAoNyAKC9OnHUIS02F1X44Mk/xrDHF4rMkwCgzM3X ZqbNM/EPRqFgOk6aaCVXWJ0= =/K7p -END PGP SIGNATURE- A mail-list of Linux Users Group - Bulgaria (bulgarian linuxers). http://www.linux-bulgaria.org - Hosted by Internet Group Ltd. - Stara Zagora To unsubscribe: http://www.linux-bulgaria.org/public/mail_list.html
