Re: Apache not dropping port 80

2001-08-30 Thread Jeremy C. Reed
On Thu, 23 Aug 2001, Jordi S . Bunster wrote: > What can possibly be happening? Sometimes the command > /etc/init.d/apache restart, or sometimes even ( /etc/init.d/apache > stop ; sleep 5 ; /etc/init.d/apache start) seems not do release por > 80. Before you start it again did you use "ps" to see

Re: Suspect Web Server has been hacked :(

2001-08-30 Thread Chris Wagner
I think it's probably too late for that. The only way to be 100% about your "disinfected" system is to fdisk it and rebuild from scratch. You can save your config files and data files, if you're sure they too haven't been altered. But say somebody relaxed an obscure security setting in some con

dhcpd option static-routes and network routes.

2001-08-30 Thread David Stanaway
Hi all, I was wondering if anyone could give me a hint as to how to set up my dhcpd to issue routing information to clients for a private network. What I would like to be able to do is have something like this: option static-routes 192.168.40.0/24 10.0.15.4, 192.168.50.0/24 10.0.15.5; option

Re: Funny kernel antics

2001-08-30 Thread Peter Billson
> Anyone know what causes this or seen this happen before? I have no idea why but I did have this happen to me running 2.2.19. Same exact symptoms. Only thing unusual was that I had patched the kernel to support an AACraid controller and made some modifications to run Oracle. At the time I wa

Funny kernel antics

2001-08-30 Thread Robert Ruzbacky
Hi! On my Internet server (running potato and kernel 2.2.19pre), I got a funny thing happening. The kernel started to spit out errors on the console. I can't reproduce them, but they are the CPU dump of registers that you get when unix normally crashes and then halts the machine. I kept get

FW: Webalizer

2001-08-30 Thread Robert Ruzbacky
On Tue, 28 Aug 2001, Craig wrote: >> only thing is its version 1.30 >> whereas if you download the source its 2.01 > Martin then wrote: Ah -- OK. Thanks for clueing me in -- I hadn't realised. Is the difference worth it? (I.e. what can't-possibly-do-without goodies am I going to g

Re: FTP thro' firewall

2001-08-30 Thread Michael Wood
On Thu, Aug 30, 2001 at 10:58:25AM +, Martin WHEELER wrote: > On Wed, 29 Aug 2001, Michael Wood wrote: > > > I don't know what "Mandrake SNF" is > > Mandrakesoft's Single Network Firewall -- a pre-built template > for an ipchains rules firewall, controlled by a web browser + [snip] I see :)

Re: Suspect Web Server has been hacked :(

2001-08-30 Thread Martin WHEELER
On Thu, 30 Aug 2001, Craig wrote: Specific question: > I need to know if there is any software for debian to > detect the presence of backdoors or rootkits. Specific answer: apt-get install chkrootkit HTH -- Sell your shares in Adobe. Boycott ALL American non-free software.

Re: FTP thro' firewall

2001-08-30 Thread Allen Ahoffman
I highly recommend the rcf firewall which can be found at http://rcf.mvlan.net > On Wed, 29 Aug 2001, Michael Wood wrote: > > > I don't know what "Mandrake SNF" is > > Mandrakesoft's Single Network Firewall -- a pre-built template for an > ipchains rules firewall, controlled by a web browser +

Re: FTP thro' firewall

2001-08-30 Thread Martin WHEELER
On Wed, 29 Aug 2001, Michael Wood wrote: > I don't know what "Mandrake SNF" is Mandrakesoft's Single Network Firewall -- a pre-built template for an ipchains rules firewall, controlled by a web browser + PHP interface. $99 with snappy 412 pp manual; or whatever it costs you to download and burn

Re: Suspect Web Server has been hacked :(

2001-08-30 Thread Michael Wood
On Thu, Aug 30, 2001 at 10:11:42AM +0200, Joerg Wendland wrote: > Hi Craig, > > On Thu, Aug 30, 2001 at 09:34:51AM +0200, Craig wrote: > > I need to know if there is any software for debian to > > detect the presence of backdoors or rootkits. I suspect > > that our old debian web server has been

Re: Suspect Web Server has been hacked :(

2001-08-30 Thread Joerg Wendland
Hi Craig, On Thu, Aug 30, 2001 at 09:34:51AM +0200, Craig wrote: > I need to know if there is any software for debian to > detect the presence of backdoors or rootkits. I suspect > that our old debian web server has been compromised. This is what I would do: - check running processes: compare '

Suspect Web Server has been hacked :(

2001-08-30 Thread Craig
Hi debian fellas I need to know if there is any software for debian to detect the presence of backdoors or rootkits. I suspect that our old debian web server has been compromised. ..Craig -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PR