Re: [SLUG] inetd.conf query

2001-01-21 Thread dmgray
No...just new entries in my inetd.conf file that I didn't put there -- SLUG - Sydney Linux User Group Mailing List - http://slug.org.au/ More Info: http://slug.org.au/lists/listinfo/slug

Re: [SLUG] inetd.conf query

2001-01-21 Thread Alan Lee
Um Do a "netstat -l -n" and see what ports are open. (Mainly high ports, ie, 16000) If you see any weird ones, from an external machine, telnet to them and see what happens. I think your box may have been root'ed or something... Regards, Alan Lee - Original Message - From: <[EMAIL P

Re: Debian ipmasq (Was: Re: [SLUG] Re: Debian)

2001-01-21 Thread Jeff Waugh
> With the following in my /etc/apt/sources.list > deb ftp://mirror.aarnet.edu.au/pub/debian stable main contrib non-free > deb ftp://mirror.aarnet.edu.au/pub/debian stable/non-US main contrib non-free > deb ftp://mirror.aarnet.edu.au/pub/debian dists/proposed-updates/ Aha. Potato... I was maki

Re: Debian ipmasq (Was: Re: [SLUG] Re: Debian)

2001-01-21 Thread Jeff Waugh
> With the following in my /etc/apt/sources.list > deb ftp://mirror.aarnet.edu.au/pub/debian stable main contrib non-free > deb ftp://mirror.aarnet.edu.au/pub/debian stable/non-US main contrib non-free > deb ftp://mirror.aarnet.edu.au/pub/debian dists/proposed-updates/ In my previous email, I s

Re: [SLUG] inetd.conf query

2001-01-21 Thread Howard Lowndes
Or if you have strange ports on your own machine then try telneting to them also and see what they give you. I believe the Ramen worm does things with inetd.conf, but I don't think it does what is being described. I agree, I think the box has been compromised. Have you monitored the traffic it

[SLUG] SLUG meeting 22nd January 2001

2001-01-21 Thread Anand Kumria
As (hopefully) you are all aware Linux.Conf.Au was held last week at UNSW. We had lots of interesting and high-profile speakers there and a number of them have agreed to venture forth to SLUG as well. We hope to have Rik van Riel (Memory Management), Jeff Dike (UML -- User Mode Linux) and our hom

Re: [SLUG] inetd.conf query

2001-01-21 Thread Dennis Gray
I agree that the machine has been compromised, thus my queries, but there was nothing more that I could find than what I have already reported. These symptoms do not seem to match anything that I have read about Ramen's footprint. I have searched www.cert.org and reported it to them as well. Den

[SLUG] Slug Tonight

2001-01-21 Thread Dean Hamstead
Is anyone from the blue mountains area going to slug tonight? It would be nice to have a train buddy rather than my trusty sony discman. Dean -- SLUG - Sydney Linux User Group Mailing List - http://slug.org.au/ More Info: http://slug.org.au/lists/listinfo/slug

Re: [SLUG] inetd.conf query

2001-01-21 Thread Ken Yap
>I agree that the machine has been compromised, thus my queries, but there >was nothing more that I could find than what I have already reported. > >These symptoms do not seem to match anything that I have read about Ramen's >footprint. I have searched www.cert.org and reported it to them as well.

[SLUG] OT: MS hacked again

2001-01-21 Thread Rick Welykochy
try a whois microsoft -- Rick Welykochy || Praxis Services -- SLUG - Sydney Linux User Group Mailing List - http://slug.org.au/ More Info: http://slug.org.au/lists/listinfo/slug

Re: [SLUG] OT: MS hacked again

2001-01-21 Thread Damien Gardner Jnr
On Mon, Jan 22, 2001 at 12:34:05PM +1100, Rick Welykochy said: --> --> try a whois microsoft --> Looks normal to me...? Remember that 'whois microsoft' will return a list of all entries which match.. - domains, hosts, etc, so all the extra entries you're seeing are hosts which people have r

Re: [SLUG] OT: MS hacked again

2001-01-21 Thread Alan Lee
server1:~$ whois microsoft.com [whois.internic.net] Whois Server Version 1.3 Domain names in the .com, .net, and .org domains can now be registered with many different competing registrars. Go to http://www.internic.net for detailed information. MICROSOFT.COM.SHOULD.GIVE.UP.BECAUSE.LINUXISGOD.C

Re: [SLUG] OT: MS hacked again

2001-01-21 Thread Howard Lowndes
Its amazing the ends people will go to to spend money on stupid ideas. -- Howard. LANNet Computing Associates "...well, it worked before _you_ touched it!" On Mon, 22 Jan 2001, Rick Welykochy wrote: > > > try a w

Re: [SLUG] OT: MS hacked again

2001-01-21 Thread Dean Hamstead
The Microsoft doesnt need to be hacked, asl quake players might say "it owns itself" meaning no one needs to mock it as it does a good enough job already =) freedom to innovation lol freedom to purchase innovations Dean Alan Lee wrote: > server1:~$ whois microsoft.com > [whois.internic.net]

Re: [SLUG] OT: MS hacked again

2001-01-21 Thread David_Fitch
Howard wrote: > Its amazing the ends people will go to to spend money on stupid ideas. you're assuming someone registered all those domains, see http://www.it.fairfax.com.au/breaking/20010122/A15467-2001Jan22.html it appears someone hijacked their domain. Dave. -- SLUG - Sydney Linux User

Re: [SLUG] OT: MS hacked again

2001-01-21 Thread Marty
> you're assuming someone registered all those domains, see > http://www.it.fairfax.com.au/breaking/20010122/A15467-2001Jan22.html > it appears someone hijacked their domain. it seems everyone is too ready to jump to conclusions. the whois lookup seems to do a pattern match so that we get every

[SLUG] Installing Suse over network

2001-01-21 Thread Joseph Luzinsky
Hello, I am Joseph Luzinsky. I would like to ask a question as to how can I install Suse Linux 6.4 over a network. One laptop, IBM Thikpad has CD-Rom with Suse 6.4 instaled. Other Thinkpad has no CD-Rom, also on the same network, has 74 MB memory and 2 GB partition that can have linux installed on