December 2003 - Legacy - lists.gtalug.org

The Mandrake "December Secret" Revealed
by aacton-B71PBEe7S7Y＠public.gmane.org 01 Dec '03

01 Dec '03

On Mon, 2003-12-01 at 18:16, JoeHill wrote: > Gael Duval had posted a cryptic note about something coming up in December, > turns out it's a Live bootable CD with a complete 9.2 system: Well, it's more than that though. Unlike most other live CD's, you can actually remove the CD (to play an audio CD for example), and it comes with a USB flash stick which acts as your /home. Pretty neat eh? Austin -- Austin Acton Synthetic Organic Chemist, Teaching Assistant, Ph.D. Candidate Department of Chemistry, York University, Toronto MandrakeLinux Volunteer Developer, homepage: www.groundstate.ca -- The Toronto Linux Users Group. Meetings: http://tlug.ss.org TLUG requests: Linux topics, No HTML, wrap text below 80 columns How to UNSUBSCRIBE: http://tlug.ss.org/subscribe.shtml

1 0

God help us all...
by legrady-bJEeYj9oJeDQT0dZR+AlfA＠public.gmane.org 01 Dec '03

01 Dec '03

>>>I suppose when you see a truck barreling down on you, you'll see a blue >>>screen! ;-) >>> >>> >>That's okay... you can just pull over and restart the engine. It will >>be fine for a few more kilometers. >> >> But every once in a while it may be necessary to reformat ..... and you'll probably want to replace your engine with a larger one -- The Toronto Linux Users Group. Meetings: http://tlug.ss.org TLUG requests: Linux topics, No HTML, wrap text below 80 columns How to UNSUBSCRIBE: http://tlug.ss.org/subscribe.shtml

1 0

The Mandrake "December Secret" Revealed
by joehill-rieW9WUcm8FFJ04o6PK0Fg＠public.gmane.org 01 Dec '03

01 Dec '03

Gael Duval had posted a cryptic note about something coming up in December, turns out it's a Live bootable CD with a complete 9.2 system: http://www.mandrakelinux.com/en/mandrakemove/ -- JoeHill ++ ICQ # 280779813 Registered Linux user #282046 Homepage: www.orderinchaos.org +++++++++++++++++++++++++++ "The more laws and order are made prominent, the more thieves and robbers there will be."-- Lao Tsu -- The Toronto Linux Users Group. Meetings: http://tlug.ss.org TLUG requests: Linux topics, No HTML, wrap text below 80 columns How to UNSUBSCRIBE: http://tlug.ss.org/subscribe.shtml

1 0

God help us all...
by joehill-rieW9WUcm8FFJ04o6PK0Fg＠public.gmane.org 01 Dec '03

01 Dec '03

On Mon, 01 Dec 2003 18:04:23 -0500 Austin <aacton-B71PBEe7S7Y at public.gmane.org> wrote: > > I suppose when you see a truck barreling down on you, you'll see a blue > > screen! ;-) > > That's okay... you can just pull over and restart the engine. It will > be fine for a few more kilometers. ...ya, until this part kicks in: "The software running their brakes will upgrade itself wirelessly." That ought to be a fun experience coming down the 427 and running into a line of slow-moving transports...Windows Update patches your brake software and you end up a red smear on some guy's "How's My Driving?" bumper sticker. -- JoeHill ++ ICQ # 280779813 Registered Linux user #282046 Homepage: www.orderinchaos.org +++++++++++++++++++++++++++ "Athens built the Acropolis. Corinth was a commercial city, interested in purely materialistic things. Today we admire Athens, visit it, preserve the old temples, yet we hardly ever set foot in Corinth."-- Dr. Harold Urey, Nobel Laureate in chemistry -- The Toronto Linux Users Group. Meetings: http://tlug.ss.org TLUG requests: Linux topics, No HTML, wrap text below 80 columns How to UNSUBSCRIBE: http://tlug.ss.org/subscribe.shtml

1 0

God help us all...
by aacton-B71PBEe7S7Y＠public.gmane.org 01 Dec '03

01 Dec '03

On Mon, 2003-12-01 at 17:52, James Knott wrote: > JoeHill wrote: > > ""We'd like to have one of our operating systems in every car on Earth," said > > Dick Brass, vice-president of Microsoft's automotive business unit. "It's a > > lofty goal."" > I suppose when you see a truck barreling down on you, you'll see a blue > screen! ;-) That's okay... you can just pull over and restart the engine. It will be fine for a few more kilometers. Austin -- Austin Acton Synthetic Organic Chemist, Teaching Assistant, Ph.D. Candidate Department of Chemistry, York University, Toronto MandrakeLinux Volunteer Developer, homepage: www.groundstate.ca -- The Toronto Linux Users Group. Meetings: http://tlug.ss.org TLUG requests: Linux topics, No HTML, wrap text below 80 columns How to UNSUBSCRIBE: http://tlug.ss.org/subscribe.shtml

1 0

God help us all...
by james.knott-bJEeYj9oJeDQT0dZR+AlfA＠public.gmane.org 01 Dec '03

01 Dec '03

JoeHill wrote: > ""We'd like to have one of our operating systems in every car on Earth," said > Dick Brass, vice-president of Microsoft's automotive business unit. "It's a > lofty goal."" > > Isn't driving in Toronto scary *enough*? > > http://www.wired.com/news/autotech/0,2554,61412,00.html?tw=wn_tophead_7 > I suppose when you see a truck barreling down on you, you'll see a blue screen! ;-) -- The Toronto Linux Users Group. Meetings: http://tlug.ss.org TLUG requests: Linux topics, No HTML, wrap text below 80 columns How to UNSUBSCRIBE: http://tlug.ss.org/subscribe.shtml

1 0

Chris is still confused
by mgjk-cpI+UMyWUv9BDgjK7y7TUQ＠public.gmane.org 01 Dec '03

01 Dec '03

Kevin Cozens wrote: > At 02:07 PM 12/01/2003 -0500, Teddy Mills wrote: > >> All I want to is stop everything coming in, and allow ports 22,25,53,80. >> >> Can someone post a generic one? Amazingly, this is not easy to find. >> My script is 95% there, but that last 5% will be difficult. >> Might be easier to work with a new script. > > [snip] > >> I want to start by not allowing anything, and then allowing only >> 22,25,53,80. > > > You might want to check out the MonMotha script at: > http://monmotha.mplug.org/firewall/index.php > > It is the script I am using on a couple of machines. It denies > everything except for what you tell it to allow. It is easily configured > by setting the contents of a few variables near the start of the script. On the subject of allowing 53, something which has always bothered me about a lot of these scripts (from monmotha): for server in ${DNS} ; do ${IPTABLES} -t filter -A INETIN -p udp -s ${server} --sport 53 -j UDPACCEPT echo -n "${server} " done Is it still possible these days to look up your victim's ISP's DNS servers, and send a source-port, source-ip spoofed UDP packet to any port on the machine? Provided that the malicious person is using an ISP which would let out any source-spoofed traffic which obviously could not have legitimately originated from within their network? Then you use that to attack a vulnerable service, to do something like an overflow attack to kill whatever was on a permitted port and open a shell on it. They specify that this is "only for zone transfers", I guess regular DNS queries are covered by: echo -n "Allowing established outbound connections back in..." ${IPTABLES} -t filter -A INETIN -m state --state ESTABLISHED,RELATED -j ACCEPT echo "done" I haven't hacked around with this stuff in a long time though :-( Just be super careful with 'deny all' inbound source-port 53 firewall configurations. -Mike -- The Toronto Linux Users Group. Meetings: http://tlug.ss.org TLUG requests: Linux topics, No HTML, wrap text below 80 columns How to UNSUBSCRIBE: http://tlug.ss.org/subscribe.shtml

1 0

God help us all...
by joehill-rieW9WUcm8FFJ04o6PK0Fg＠public.gmane.org 01 Dec '03

01 Dec '03

""We'd like to have one of our operating systems in every car on Earth," said Dick Brass, vice-president of Microsoft's automotive business unit. "It's a lofty goal."" Isn't driving in Toronto scary *enough*? http://www.wired.com/news/autotech/0,2554,61412,00.html?tw=wn_tophead_7 -- JoeHill ++ ICQ # 280779813 Registered Linux user #282046 Homepage: www.orderinchaos.org +++++++++++++++++++++++++++ "You tell me it's the institution; Well you know, you better free your mind instead..."-- John Lennon -- The Toronto Linux Users Group. Meetings: http://tlug.ss.org TLUG requests: Linux topics, No HTML, wrap text below 80 columns How to UNSUBSCRIBE: http://tlug.ss.org/subscribe.shtml

1 0

Chris is still confused
by fraser-Txk5XLRqZ6CsTnJN9+BGXg＠public.gmane.org 01 Dec '03

01 Dec '03

On December 1, 2003 02:07 pm, Teddy Mills wrote: > internet interface is ppp0 > internal inteface is eth1 > > This is on a DNS and Web server (I know, not the idea, but Im pressed for > space.) > All I want to is stop everything coming in, and allow ports 22,25,53,80. Go to http://shorewall.sourceforge.net/ read their quickstart guide, install it, configure it, forget about it. -- Fraser Campbell <fraser-Txk5XLRqZ6CsTnJN9+BGXg at public.gmane.org> http://www.wehave.net/ Georgetown, Ontario, Canada Debian GNU/Linux -- The Toronto Linux Users Group. Meetings: http://tlug.ss.org TLUG requests: Linux topics, No HTML, wrap text below 80 columns How to UNSUBSCRIBE: http://tlug.ss.org/subscribe.shtml

1 0

Chris is still confused
by fraser-Txk5XLRqZ6CsTnJN9+BGXg＠public.gmane.org 01 Dec '03

01 Dec '03

On December 1, 2003 02:07 pm, Teddy Mills wrote: > Anyways here it is....SMTP and DNS still messed up... Go to http://shorewall.sourceforge.net/ read their excellent quickstart guides, install shorewall, forget your troubles. -- Fraser Campbell <fraser-Txk5XLRqZ6CsTnJN9+BGXg at public.gmane.org> http://www.wehave.net/ Georgetown, Ontario, Canada Debian GNU/Linux -- The Toronto Linux Users Group. Meetings: http://tlug.ss.org TLUG requests: Linux topics, No HTML, wrap text below 80 columns How to UNSUBSCRIBE: http://tlug.ss.org/subscribe.shtml

1 0