Re: security news?????

2001-10-30 Thread Meritt James
I check out: DTA HREF=http://www.atstake.com/security_news/;@stake Security News Network/A DTA HREF=http://www.securityfocus.com/news;Security Focus/A DTA HREF=http://www.antiOnline.com/;AntiOnline/A | A HREF=http://www.AntiOnline.com/eye/;Eye on the Underground/A DTA

RE: Packet Sniffing in a Switched LAN

2001-10-30 Thread b. mac
IIRC, in order to sniff on a _switched_ LAN, you will first need to 'poison' the ARP caches and CAM tables, then sniff. =) i think dsniff will do this for you and more -- Get your free email from www.linuxmail.org Powered by Outblaze

Re: help - can someone explain this to me?

2001-10-30 Thread Moo
but that does not explain why he is gettings hits by non routable ip addresses..even if they were natted they would show the NAT external address ..not the internal address and yes 10.x.x.x , 172.16-31.x.x ,192.168.x.x are non routable (RFC 1918) perhaps you should email the abuse lines for the

Re: help - can someone explain this to me?

2001-10-30 Thread Brad Westman
RFC 1819 or 1918 sorry not sure which one.. ietf.org - Original Message - From: Lutz Badenheuer [EMAIL PROTECTED] To: security-basics [EMAIL PROTECTED] Sent: Friday, October 26, 2001 5:41 PM Subject: Re: help - can someone explain this to me? Please have another look at your

RE: help - can someone explain this to me?

2001-10-30 Thread Patrick S. Harper
Here is the arin whois results for the three reserved ip ranges. These will not route on the internet. IANA (RESERVED-6) Internet Assigned Numbers Authority 4676 Admiralty Way, Suite 330 Marina del Rey, CA 90292-6695 US Netname: RESERVED-10 Netblock: 10.0.0.0 -

RE: IDS White Papers/Documents

2001-10-30 Thread Golden_Eternity
The background to this is that I want to implement an IDS on a network which has an incoming/outgoing Internet connection for all users. There is currently a firewall protecting this connection, but I want to know whether I should locate the IDS in front of or behind the firewall? Should the

RE: IDS White Papers/Documents

2001-10-30 Thread Clément Dupuis
Good day Mark, Goto http://www.cccure.org/categories.php?op=newindexcatid=1 On that page you will find a link to the 60 minutes network security guide. The last portion of the guide is about IDS deployment and covers location. Clement -Original Message- From: [EMAIL PROTECTED]

RE: help - can someone explain this to me?

2001-10-30 Thread Jeff Miller
FYI - the RFC 1918 172.x range is 172.16.0.0 - 172.31.255.255 (172.16.0.0/12 255.240.0.0). The rest of the range is permitted to route normally all over the world. -Original Message- From: Lutz Badenheuer [mailto:[EMAIL PROTECTED]] Sent: Friday, October 26, 2001 4:41 PM To:

RE: security news?????

2001-10-30 Thread Nick
leon [mailto:[EMAIL PROTECTED]] Does anyone have links, mailing lists, or etc that they would like to sure? It would be much appreciated and to the people who read securitynewsportal.com I will miss it as much as you do. Cheers, Leon Highly recommended, also, is Dartmouth College's Institute

RE: W2k Blues

2001-10-30 Thread Robert Clark
-Original Message- From: phiber2001 [mailto:[EMAIL PROTECTED]] Sent: Saturday, October 27, 2001 11:51 AM To: [EMAIL PROTECTED] Subject: W2k Blues We have this W2k (Professional) and want to by-pass the login window. It has all the guest/ default accounts disabled and has