Re: port 1080

2001-12-10 Thread Amoediun Trepcoze
80,http,World Wide Web HTTP 81,hosts2+ns,HOSTS2 Name Server 1080,socks,Socks 8080,WWW+Proxy,Standard HTTP Proxy Hello all, I have a very basic question for you: I did a scan of myself today and noticed that I have ports 80, 81, 1080, and 8080 open. I am running Win2K Pro and am not hosting a

Win2K and Lview.exe -- am I infected?

2001-12-10 Thread JJ Driscoll
For a long time now I have used a very old version of Lview, I believe it might be a 16 bit version, in my 32-bit operating systems to view my Jpegs. I just like its small size and simplicity. It used to occasionally lock up if I accidentally opened 2 or more instances of the program, but

bandwidth monitoring

2001-12-10 Thread igal tiverobsky
Hello list, I would like to monitor my bandwidth at home, 1)I would like to know if I am getting all the bandwidth I have been promised from the ISP. 2)I would like to be sure no one is using my bandwidth. do you know of any tool that shows how much traffic is passing through a certain

RE: Outlook2000 headers

2001-12-10 Thread Patrick S. Harper
If you are the recipient or the CC you can see the headers if they came in from the internet. If you are the BCC or they came through your organizational exchange server you will not be able to. Patrick S. Harper | MCSE ISS mailto:[EMAIL PROTECTED] http://www.internetsecurityguru.com

bug in ssh2 or secureCRT?

2001-12-10 Thread Liu Wen
I am using SecureCRT with SSH in windowsXP, but everytime I press Ctrl-S in a session window, it lost response. I have to manually disconnect it :( Cheers Liu

RE: SNMP security

2001-12-10 Thread Pradeep Kumar
Mark - are you frightened :-). SNMP v3 will address the fears of such users who dont I would never allow SNMP in from or out to the Internet. I look at this as an advantage - I can have my trusted users on the internet manage the network devices 24 X 7 from a geographically spread location.

Re: IE content advisor password reset?

2001-12-10 Thread Inferi Dii
It just occured to me that you may not be able to get to www.regedit.com with your current problem. To fix your problem delete the following key from your registry. Key: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ Policies\Ratings] This will fix your problem. Hope this

Re: IE content advisor password reset?

2001-12-10 Thread Inferi Dii
This requires an edit to your registry. Go to www.regedit.com and in the search box type in content advisor password. This will provide you an answer to your question. I did this as a prank to someone once and as payback he put redhat onto my 2K workstation. Needless to say, I don't pull

Re: promiscuous Mode detection?

2001-12-10 Thread J C Lawrence
On Fri, 7 Dec 2001 08:19:35 +0100 GomoR [EMAIL PROTECTED] wrote: On Wed, 5 Dec 2001 12:57:03 +0100 Christian Steinert [EMAIL PROTECTED] wrote: Found a lot of tools but little description. Surely one of you hotshots will know a little more than me... Thanks. Christian. If it is a

Re: Outgoing connection to port 6000 from port 25...

2001-12-10 Thread Anarchy
Hey, Although the source ports are GENERALLY selected by random it is possible to specify the source port. You should look for who is spawing the process creating this connectionhas it only happened once or is it happening more than once? If it has happened more than once you should try

RE: httport NAT

2001-12-10 Thread Delafuente, Juan
Yes, It can be configured using fixed port translations. In a Cisco Router for example the syntax should be: ip nat inside source static tcp internal IP address Internal Port External IP address External Port extendable The external port should be the one you want to connect, in this case 80,

Re: Procmail virus filtering

2001-12-10 Thread Pete Procenko
There is already a working solution http://www.impsec.org/email-tools/procmail-security.html I use it for about 6 month, it works well. - Original Message - From: Richard Garand [EMAIL PROTECTED] To: Jonas Anden [EMAIL PROTECTED] Cc: [EMAIL PROTECTED] Sent: Friday, December 07, 2001 3:51

Re: Sensitive information in an NDR

2001-12-10 Thread Meritt James
If anyone wants to find that out, it is trivial. If you MUST send this document, I recommend encrypting first. BTW: I also recommend renaming those servers. Security through obscurity doesn't work, but why go out of your way to make things easy? ;-) V/R Jim Joost De Cock wrote: Hello

RE: W32.Goner.A@mm

2001-12-10 Thread Marco Bicca ®
At 13:04 12-07-2001, Luciano Giacchetta wrote: have you tried to block all (.scr) files at the gateway level? Do you have any product to do this like NAV GW, NAV Exchange and so on? Take a look at this document and verify all the steps to clean this virus manually: http:[EMAIL PROTECTED] hope

RE: Win32 Snort Question

2001-12-10 Thread Johnson, David
You can't run an interface in Windows without an IP address. What I did on mine was to block all access to the machine at the firewall except for a few addresses that I regularly use. I would avoid putting firewall software on the machine as it might block some traffic from Snort. A lot of