Automating patch deployment

2003-08-10 Thread George Peek
We have two networks, one AD and one NT4.0. We can not use AD to deploy MSI patch packages to workstations that are not part of the AD (Active Directory), but are part of the NT domain. Not really interested in purchasing SMS as it seems too costly (why should we?). Considering HFNetChkPro 4 to aut

RE: Question for all

2003-08-04 Thread George Peek
Could backdoor trojan be a generic name? Symantec is known to detect trojan appz, possibly altered or generated by another app. It is quarantined because it is still active. Best bet is to 1. Boot into safe mode or emergency console (you have to allow group policy to access other drives/folders ot

RE: Monitoring the network: Routers

2003-07-23 Thread George Peek
If you follow the install guide, download Firedeamon (to make it run as a service), and download mrtgindex page of the MRTG demo site and edit it.. it works great! George -Original Message- From: Nathan [mailto:[EMAIL PROTECTED] Sent: Tuesday, July 15, 2003 6:24 AM To: 'Nick Benigno'; [EM

RE: SSH port forwarding not working?

2003-07-22 Thread George Peek
Make sure you check out tightVNC as it is deffinetly much faster and stable (more secure?). -Original Message- From: David Kellaway [mailto:[EMAIL PROTECTED] Sent: Friday, July 18, 2003 8:39 AM To: "Security-Basics" Cc: "Koji Nobumoto" Subject: Re: SSH port forwarding not working? Hi all

RE: Continued probing with source IP 10.x.x.x

2003-07-17 Thread George Peek
Try ethereal for packet inspection/capture -Original Message- From: Paul Benedek [mailto:[EMAIL PROTECTED] Sent: Tuesday, July 08, 2003 10:08 AM To: 'Justin Pryzby'; 'Damon McMahon' Cc: [EMAIL PROTECTED] Subject: RE: Continued probing with source IP 10.x.x.x Hi, To ensure that you are n

RE: log monitoring tool against router?

2003-07-07 Thread George Peek
Check out Kiwi Syslog Deamon (Freeware) for capturing events from routers, firewalls, etc.. UDP/TCP/SNMP capable. Works great with Cisco equipment, and supports SQL. http://www.kiwisyslog.com/ -Original Message- From: Devdas Bhagat [mailto:[EMAIL PROTECTED] Sent: Thursday, July 03, 2003 7:

RE: What is this port? is it a trojan?

2003-07-03 Thread George Peek
SVCHOST.EXE - Your services execute under this process http://www.jsiinc.com/SUBJ/tip4600/rh4660.htm -Original Message- From: Hyperion [mailto:[EMAIL PROTECTED] Sent: Monday, June 30, 2003 5:33 PM To: Security Basics Mailing List; Uwe Röhl Subject: RE: What is this port? is it a trojan?

RE: What is this port? is it a trojan?

2003-07-02 Thread George Peek
You can tell what application/service/dll is using the port in question. FPort will help you do that. Good luck. http://www.foundstone.com/index.htm?subnav=resources/navigation.htm&subconte nt=/resources/proddesc/fport.htm -Original Message- From: Hyperion [mailto:[EMAIL PROTECTED] Sent: