Re: Now What?

2001-12-11 Thread Christian Belisle
George wrote: > > Okay, after goofing and wondering about akamai.net, there is good reason to hesitate >when again asking about symantecs live update. After all, last time it was legit, but >now? > > For some reason, with no other connections open, netstat shows this when connected >to live u

RE: Win32 Snort Question

2001-12-11 Thread Joe-Clifton
David, Just as a general statement "you can't run an interface in Windows without an IP address" is incorrect. I have done this numerous times, especially with ISS Real Secure, but it wasn't the application that allowed it. You can simply "unbind" a protocol stack from the interfaces them selv

RE: promiscuous Mode detection?

2001-12-11 Thread Dante Mercurio
Using a recieve only patch cable should make sniffers virtually undetectable. Also good for IDS systems, if you don't need to alert over the ethernet, or have a secondary one. http://personal.ie.cuhk.edu.hk/~msng0/sniffing_cable/index.htm M. Dante Mercurio, CCNA, MCSE+I, CCSA Consulting Group Ma

RE: bandwidth monitoring

2001-12-11 Thread Munkhbayar
Try http://republika.pl/pwoz/ I'm using it for 1 year at home and office. It's a freeware. I appreciate this programm. -Original Message- From: igal tiverobsky [mailto:[EMAIL PROTECTED]] Sent: Sunday, December 09, 2001 6:05 PM To: [EMAIL PROTECTED] Subject: bandwidth monitoring Hello

Re. NOW WHAT

2001-12-11 Thread Simon Barr
> -Original Message- > From: George [mailto:[EMAIL PROTECTED]] > Sent: 08 December 2001 01:45 > To: [EMAIL PROTECTED] > Subject: Now What? > > > Okay, after goofing and wondering about akamai.net, there is good reason >to hesitate when again asking about symantecs live update. After

Re: Sensitive information in an NDR

2001-12-11 Thread Adrien de Beaupre
Encrypting an NDR (non-delivery report)? Normally sent when email delivery isn't possible for some reason (unknown user, unable to resolve server...) to the original sender. You would not know what keys to use for the encryption. On Dec 10, "Meritt James" <[EMAIL PROTECTED]> wrote: > > If any

RE: Squid Proxy

2001-12-11 Thread Dante Mercurio
squid proxy defaults to port 3128 For a searchable port list try the one on my site: http://www.ccgsecurity.com The are probably scaning for open proxies in order to surf anonymously off you, or looking for an exploit. One recent one can be found here: http://www.security-focus.com/cgi-bin/vulns

Re: bug in ssh2 or secureCRT?

2001-12-11 Thread Virgo Pärna
Liu Wen wrote: > I am using SecureCRT with SSH in windowsXP, but everytime I press Ctrl-S > in a session window, it lost response. I have to manually disconnect it > :( Probably not a bug but a feature:) It's a bug, if Ctrl-Q doesn't continue. Many terminal softwares use Ctrl-S and Ctrl-

Re: bandwidth monitoring

2001-12-11 Thread dewt
On Sunday 09 December 2001 04:05 am, igal tiverobsky wrote: > Hello list, > > I would like to monitor my bandwidth at home, > > 1)I would like to know if I am getting all the bandwidth I have been > promised from the ISP. > > 2)I would like to be sure no one is using my bandwidth. > > do you know

RE: Firewall in HA: how VRRP works?

2001-12-11 Thread Dante Mercurio
Depends on the firewall. Some like the WG use a heatbeat packet over the ethernet to determine if the failover should take place. Others like the PIX use a dedicated line that monitors both the master and secondary firewall to determine which takes over. In the PIX there are two failover type. The

RE: privacy software

2001-12-11 Thread Harris Samuel W PORT
Idcide will handle detecting adware (but works only for M$ Windows) and it has 3 different settings from none, to mild paranoia, to extreme paranoia. As a fellow student stated in one of my classes in Info Security said at the end of his presentation "Paranoia is your friend" Samuel Harr

RE: Exchange 2000

2001-12-11 Thread dumbwabbit
Network Associates' GroupShield has the same functionality of being able to automatically block/delete/quarantine any specified attachment types. --- Marco Bicca ® <[EMAIL PROTECTED]> wrote: > At 16:25 12-06-2001, Brent Scott wrote: > Yep, for sure, you should use NAV For Exchange 2.51 > ;-) ... P

Re: special squid config help...

2001-12-11 Thread Aide Florent
Hi, If you want some help on configuring squid try to use webmin, it as a good interface for squid. before webmin try something like that: acl mynet1 src 192.168.0.1-192.168.0.254/255.255.255.0 acl mynet2 src 10.106.6.1-10.106.6.254/255.255.255.0 acl mynet3 src 172.168.11.1-172.168.11.254/255.

RE: Win2K and Lview.exe -- am I infected?

2001-12-11 Thread Chris Chandler
You should either replace it with a different JPEG viewer or upgrade your LView Pro to a 32 bit version. WOWEXEC.exe is "Windows on Windows" for running 16 bit Apps on an NT machine. -Original Message- From: JJ Driscoll [mailto:[EMAIL PROTECTED]] Sent: Saturday, December 08, 2001 8:19 PM

RE: bandwidth monitoring

2001-12-11 Thread Ziggy
Might want to look at "snort" and also "mrtg" they can give you some good stat's on bandwith usage. Hope this helps Ziggy -Original Message- From: igal tiverobsky [mailto:[EMAIL PROTECTED]] Sent: Sunday, December 09, 2001 1:05 PM To: [EMAIL PROTECTED] Subject: bandwidth monitoring He

Re: bandwidth monitoring

2001-12-11 Thread Mike Craik
igal tiverobsky wrote: > > 1)I would like to know if I am getting all the bandwidth I have been promised from >the ISP. > > 2)I would like to be sure no one is using my bandwidth. Hi, You can use MRTG to graph an SNMP capable device. NT comes with an SNMP agent and you Linux distro probably

Re: rid of spamming on web email

2001-12-11 Thread dumbwabbit
See inline comment. --- "Jay D. Dyson" <[EMAIL PROTECTED]> wrote: > -BEGIN PGP SIGNED MESSAGE- > > On 6 Dec 2001 [EMAIL PROTECTED] wrote: > > > Could you please tell me what one can do to > counter these spammers... > > My email address has been hidden under the BCC: > tag and the unsu

Re: bug in ssh2 or secureCRT?

2001-12-11 Thread Guido Diepen
On Sun, 9 Dec 2001, Liu Wen wrote: > I am using SecureCRT with SSH in windowsXP, but everytime I press Ctrl-S > in a session window, it lost response. I have to manually disconnect it > :( This has nothing to do with a bug AFAIK... It just puts your terminal on Silence If you press Ctrl-Q

Re: Firewall in HA: how VRRP works?

2001-12-11 Thread Nick
OK, in a nutshell... The 2 devices (in this case FWs) each have their own physical IP addresses on each interface. Each *pair* of interfaces (DMZ, intranet, etc...) has one virtual IP address that they both pay attention to. Which application you are using will determine the method for config

Re: List of Windows NT/2000 files and what they do

2001-12-11 Thread Panos Gamaw
if i remember correct: www.webdon.com good luck >From: "May, Jason S" <[EMAIL PROTECTED]> >To: [EMAIL PROTECTED] >Subject: List of Windows NT/2000 files and what they do >Date: Mon, 12 Nov 2001 12:24:59 -0600 > >Does anyone know of a list of files for Windows NT/2000 that show what each >file do

Re: Squid Proxy

2001-12-11 Thread dewt
On Monday 10 December 2001 12:49 pm, Craig Van Tassle wrote: > Hello Everyone. I'v been noticeing in my snort logs a lot of Squid Proxy > attemts. My box is setup as a firewall/gateway for one of my friends but i > dont think that hes causing them (unless hes capable of spoofing what NIC > they

RE: Win32 Snort Question

2001-12-11 Thread Stuart Underhill
Thanks for your help. However since my original posting, I have discovered that W2k (perhaps NT aswell - yet to test) can be run without an IP address. The IP appears in the registry in twice in separete areas, by setting the IP to something easy to find (eg 1.2.3.4) and then searching the reg

Re: privacy software

2001-12-11 Thread Bloed
take a look at www.lavasoftusa.com and download ad-awares last version. it takes care of my cookies, registry and detects other spy software. grtz, bloed On Sun, Dec 09, 2001 at 03:48:45PM -0500, lauraisko wrote: > does anyone know of software that will do all of the following: > - selectively

Re: Win2K and Lview.exe -- am I infected?

2001-12-11 Thread dumbwabbit
Use MD5sum to compare your source file to system file. Get HandleEx (don't remember from where, sorry), Fport (maps running processes to ports - from Foundstone), and some of the utilities from SysInternals - ListDLLs, Process Explorer, TokenMon, WinObj - between these, you should be able to dete

Re: please help with SSL

2001-12-11 Thread Craig Van Tassle
Ok here is the basics of the OSI model for networking. layer 1 -physical (the actual wire) layer 2 - data link ( transmits the frames and recives the frames and it and verifies the delivery) layer 3 - network (communications between the machines ie the sub-net

Re: Httport & NAT

2001-12-11 Thread J Wilkinson
It's more common than you might think, especially for small regional ISPs who don't have a large allocation of addresses from ARIN. For DSL subscribers, my ISP offers a choice of a static IP (private 10.x space) which routes through a NAT firewall, or a static publicly routable IP for a small add

Re: Squid Proxy

2001-12-11 Thread Craig Van Tassle
Well i checked out all the irc servers ive been at and the ip does not resolve to any of the servers ive been using.. so i was just wondering if its possible that someone else could be trying to crash against my port 3128? Thanks Craig On Mon, Dec 10, 2001 at 07:28:53PM -0600, dewt wrote: > On

RE: Source-sensitive Routing ...

2001-12-11 Thread Eric Schroeder
The question I have is are the two links going to two separate ISPs? If so then you have to overcome the issue of how to get the packets routed back to you. If you are not using BGP, there is no way I know of to have a single IP address routed to two different ISPs. For example, if I have t

Re: bug in ssh2 or secureCRT?

2001-12-11 Thread Mike Craik
Liu Wen wrote: > > I am using SecureCRT with SSH in windowsXP, but everytime I press Ctrl-S > in a session window, it lost response. I have to manually disconnect it > :( Hi, This is a feature of most (all?) terminals - XON/XOFF flow control. CTRL + S suspends terminal output CTRL + Q resume

Re: bug in ssh2 or secureCRT?

2001-12-11 Thread Jeff Giuliano
That stops the shell. Try Ctrl-Q to continue. -Jeff Liu Wen wrote: > > I am using SecureCRT with SSH in windowsXP, but everytime I press Ctrl-S > in a session window, it lost response. I have to manually disconnect it > :( > > Cheers > Liu

Re: Now What?

2001-12-11 Thread Eric Schroeder
It looks like you specified Level13.net as the site you e-mailed, but the netstat shows level3.net. I know that Level 3 Communications (Level3.net) is a major international backbone. Perhaps they are hosting or proxing for Symantec? Cheers, Eric George <[EMAIL PROTECTED]> 12/07/2001 06

Re: bandwidth monitoring

2001-12-11 Thread Gregory Cascante
LINUX: iptraf , ntop - Original Message - From: "igal tiverobsky" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Sunday, December 09, 2001 2:05 AM Subject: bandwidth monitoring > Hello list, > > I would like to monitor my bandwidth at home, > > 1)I would like to know if I am getting

Re: bandwidth monitoring

2001-12-11 Thread Guido Diepen
On Sun, 9 Dec 2001, igal tiverobsky wrote: > Hello list, > > I would like to monitor my bandwidth at home, > > 1)I would like to know if I am getting all the bandwidth I have been promised from >the ISP. > > 2)I would like to be sure no one is using my bandwidth. > > do you know of any tool

RE: bandwidth monitoring

2001-12-11 Thread Peter Mueller
> I would like to monitor my bandwidth at home, > > 1)I would like to know if I am getting all the bandwidth I > have been promised from the ISP. > > 2)I would like to be sure no one is using my bandwidth. > > do you know of any tool that shows how much traffic is > passing through a certain

Re: rid of spamming on web email

2001-12-11 Thread White Vampire
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On Sun, Dec 09, 2001 at 11:41:40AM -0800, Jay D. Dyson([EMAIL PROTECTED]) wrote: > On 6 Dec 2001 [EMAIL PROTECTED] wrote: > > > Could you please tell me what one can do to counter these spammers... > > There isn't really much one can do with

Re: Unix Security Standards, books, tools...

2001-12-11 Thread Gurpreet Singh
Ryan, Which book are you referring to, is it 'Linux System Administration (Linux Library) -- Vicki Stanfield, et al' @ http://www.amazon.com/exec/obidos/ASIN/0782127355/qid=1007982747/sr=8-1/ref=sr_8_71_1/104-7388536-0962334. GP Ryan Anderson wrote: > I would recommend "UNIX System Administrat