Re: Linux connectivity trashed.

2001-04-02 Thread Richard B. Johnson
On Thu, 29 Mar 2001, Doug Ledford wrote: > John Jasen wrote: > > > > On Thu, 29 Mar 2001, Richard B. Johnson wrote: > > > > > In short, your security administrator needs to be dragged out, shot, and > > left hanging by the front door as a warning to his replacement. > > > > Or, at least fired

Re: Linux connectivity trashed.

2001-03-31 Thread John Kodis
On Thu, Mar 29, 2001 at 08:34:06AM -0500, Richard B. Johnson wrote: > So, now I hooked up my lap-top, installed Windows and here I am. > Only windows machines are allowed to access the outside world. That is a shame. I can think of two things that might be of use under these circumstances:

[OT] Re: Linux connectivity trashed.

2001-03-29 Thread David
Might I suggest seeking a new employer whose IT department doesn't seek the smell of fresh fertilizer compounds about their head and neck. -d Richard B. Johnson wrote: > This is for information only. > > Last week a standard RH distribution of Linux was rooted from what looks > like a Russia

Re: Linux connectivity trashed.

2001-03-29 Thread Roger Larsson
Hi, I assume that it is ok to sue any company that forwards viruses too... (not only the author...) Are Raytheon suing the company were you work, or some unknown/unnamed company made up by Microsoft? (you were not specific about this) /RogerL On Thursday 29 March 2001 15:34, Richard B. Johnson

Re: Linux connectivity trashed.

2001-03-29 Thread Doug Ledford
John Jasen wrote: > > On Thu, 29 Mar 2001, Richard B. Johnson wrote: > > >snipped< >more snippage< > In short, your security administrator needs to be dragged out, shot, and > left hanging by the front door as a warning to his replacement. > > Or, at least fired. That, or have all the Unix u

Re: Linux connectivity trashed.

2001-03-29 Thread John Jasen
On Thu, 29 Mar 2001, Richard B. Johnson wrote: >snipped< First mistake: your security administrator relied on the firewall for protection. It is an _aid_ to security; not the 'be all and end all'. IOW, the hosts weren't hardened to resist penetration in case the firewall didn't cover it.

Re: Linux connectivity trashed.

2001-03-29 Thread Jesse Pollard
"J . A . Magallon" <[EMAIL PROTECTED]>: > On 03.29 Richard B. Johnson wrote: > > > > The penetration occurred because somebody changed our firewall > > configuration > > so that all of the non-DHCP addresses, i.e., all the real IP addresses had > > complete > > connectivity to the outside world.

Re: Linux connectivity trashed.

2001-03-29 Thread J . A . Magallon
On 03.29 Richard B. Johnson wrote: > > The penetration occurred because somebody changed our firewall > configuration > so that all of the non-DHCP addresses, i.e., all the real IP addresses had > complete > connectivity to the outside world. This meant that every Linux and Sun > Workstation >

Linux connectivity trashed.

2001-03-29 Thread Richard B. Johnson
This is for information only. Last week a standard RH distribution of Linux was rooted from what looks like a Russian invasion. The penetration used the method taught in the CERT Advisory CA-2000-17. The intruder(s) then attempted to perform additional penetrations from this site. One of the