December 1998 - openSUSE Users - openSUSE Mailing Lists

Re: [SuSE Linux] security breaches... Help!
by wizard01＠impop.bellatlantic.net 01 Dec '98

01 Dec '98

Based off of the ip (MAYBE it isn't spoofed) you should be able to go to the ISP with the timestamp and make a complaint. According to my lookup the machine/port name is: R-G-189- 128.access.net.il . The 192.116.189.128 and the 192.116.194.173 belong to access.net.il, the address 192.116.189.1 is musso.inter.net.il . Just remember to reference your timestamp with GMT. When I've had problems with a non-spoofed IP and sent a log, complaint and timestamp to the admin of the ISP I've ALWAYS gotten results. > > On a several occasions, somebody has managed to break into my networked > SuSE Linux box and do some damage. On two occasions, the damage has > made it impossible for me to log in to my own site. > > Yesterday, for example, I found the following entries in /etc/passwd. > > slage::0:0::/root:/bin/bash > Slage::999:999::/tmp:/bin/bash > > I certainly didn't put these lines in my /etc/passwd file. In > /var/log/warn and in /var/log/messages I find a lot of stuff like this. > > Nov 29 04:48:20 sophia login[2221]: invalid password for `UNKNOWN' on > `ttyp0' from `192.116.194.173' > Nov 29 04:48:37 sophia login[2221]: invalid password for `UNKNOWN' on > `ttyp0' from `192.116.194.173' > Nov 29 04:48:43 sophia login[2221]: invalid password for `root' on > `ttyp0' from `192.116.194.173' > Nov 29 04:50:16 sophia login[2228]: invalid password for `root' on > `ttyp0' from `192.116.194.173' > Nov 29 04:51:03 sophia login[2231]: invalid password for `root' on > `ttyp0' from `192.116.194.173' > Nov 29 04:51:08 sophia login[2232]: invalid password for `root' on > `ttyp1' from `192.117.189.128' > Nov 29 04:53:55 sophia login[2245]: no shadow password for `Slage' on > `ttyp0' from `192.117.189.128' > > I don't know how this person managed to add lines to my /etc/passwd > file. By the time s/he was done, I couldn't log into my own system > under *any* legitimate name and passwd, and had to boot from a floppy > and reinstall a bunch of stuff. Is that some sort of security device > kicking in? If so, what is the best way of undoing the damage? > > Can anyone advise me about the best method of preventing this sort of > thing? > > Thanks. > > Wes > - > To get out of this list, please send email to majordomo(a)suse.com with > this text in its body: unsubscribe suse-linux-e > - To get out of this list, please send email to majordomo(a)suse.com with this text in its body: unsubscribe suse-linux-e

1 0

Re: [SuSE Linux] Spam on this list
by marc_bouron＠hotmail.com 01 Dec '98

01 Dec '98

Hello James, >I havn't been on this list but a few hours and I've been spammed twice by a >stinken porno spammer. Is this typical for the SuSE list?? No, it's not. It's just very sad when it does happen. Hope you stay on the list despite this episode. Cheers, Marc. ______________________________________________________ Get Your Private, Free Email at <A HREF="http://www.hotmail.com"><A HREF="http://www.hotmail.com</A">http://www.hotmail.com</A</A>> - To get out of this list, please send email to majordomo(a)suse.com with this text in its body: unsubscribe suse-linux-e

1 0

[SuSE Linux] Membership Offer
by lisa＠fosters.porndaily.com 01 Dec '98

01 Dec '98

Congratulations, As a special promo deal, you've been selected to receive free entry to a premium adults only site You must be 18 to enjoy this offer, proof of age is required. Please go to: <A HREF="http://207.82.60.235/click792.asp"><A HREF="http://207.82.60.235/click792.asp</A">http://207.82.60.235/click792.asp</A</A>> FREE membership includes: 35 FREE LIVE video feeds = tell girls what to do! Secretary Cam = Hidden Cam looking up her skirt! Pee Cam = Hidden Toilet Camera Change Room Cam = Cameras in a change room Shower Cam = Lezbo Shower Feeds Gyno Clinic Cam = Rubber gloves in pussy! 12000 video feeds = right into your browser! <a href="<A HREF="http://207.82.60.235/click792.asp"><A HREF="http://207.82.60.235/click792.asp</A">http://207.82.60.235/click792.asp</A</A>>">Click Here</a> ================================================= To be removed from mailings of this type reply to this email with remove in the subject field. ================================================= - To get out of this list, please send email to majordomo(a)suse.com with this text in its body: unsubscribe suse-linux-e

3 2

[SuSE Linux] Spam on this list
by jdbaker＠techinter.com 01 Dec '98

01 Dec '98

I havn't been on this list but a few hours and I've been spammed twice by a stinken porno spammer. Is this typical for the SuSE list?? James D Baker Yet Another Human from the Planet Earth www.aamstrand.com/pws/jdb/index.htm - To get out of this list, please send email to majordomo(a)suse.com with this text in its body: unsubscribe suse-linux-e

1 0

[SuSE Linux] Intel motheboard
by milan＠elas.sk 01 Dec '98

01 Dec '98

Do you have any skills with running S.u.S.E 5.3 on Intel PR440FX with two PPro 200Mhz and 256MB RAM and intel ethernet on board ? Is this stable, any problems ? Milan Hromada tel.: +421 862 401335 <A HREF="mailto:mhromada@elas.sk">mailto:mhromada@elas.sk</A> - To get out of this list, please send email to majordomo(a)suse.com with this text in its body: unsubscribe suse-linux-e

1 0

Re: [SuSE Linux] Scanner
by JPShebell＠aol.com 01 Dec '98

01 Dec '98

I was under the impression that the Astra 1220S came with a "bundled" SCSI card. I have a Scanmaker X6el that came with a AHA 2902 card (25 pin). It works very well, but did cost $225. Regards, John Shebell - To get out of this list, please send email to majordomo(a)suse.com with this text in its body: unsubscribe suse-linux-e

1 0

Re: [SuSE Linux] Star Office 5 and SuSE 5.3
by kmadel＠vt.edu 01 Dec '98

01 Dec '98

Have you checked your library paths? -----Original Message----- From: EGRET Lures <EGRETLURES(a)kricket.net> To: suse5.3 <suse-linux-e(a)suse.com> Date: Tuesday, December 01, 1998 12:04 AM Subject: [SuSE Linux] Star Office 5 and SuSE 5.3 > >I still can't get Star Office 5 to install under 5.3. The undefined symbol: >_dl_profile is still plaguing me. This is for the libc.so.6. > >Has anyone else successfully installed SO5 with 5.3? > >The windows version installed under 95 and NT without any problems. If this >package is going to compete under Linux with Office97 under NT/9X, then the >installation will have to be smoother. > >TIA Henry > >- >To get out of this list, please send email to majordomo(a)suse.com with >this text in its body: unsubscribe suse-linux-e > - To get out of this list, please send email to majordomo(a)suse.com with this text in its body: unsubscribe suse-linux-e

1 0

Re: [SuSE Linux] ISDN Offline
by wizard01＠impop.bellatlantic.net 01 Dec '98

01 Dec '98

Check your /etc/diald.conf file and see if you're monitoring the ftp ports, it SOUNDS like the file may be missing though... > > Hi, > > I'am running SUSE 5.3. Isdn is running well, accept when I'am online, > the ISDN line > goes offline without any reason. I have timeout 60 sec. but even when I > downloading > a file after a while the line goes offline. > > Does anyone know the problem here? > > Thanks for any help, suggestions. > > Rgds > > Wil > > - > To get out of this list, please send email to majordomo(a)suse.com with > this text in its body: unsubscribe suse-linux-e > - To get out of this list, please send email to majordomo(a)suse.com with this text in its body: unsubscribe suse-linux-e

1 0

[SuSE Linux] Membership Offer
by lisa＠fosters.porndaily.com 01 Dec '98

01 Dec '98

Congratulations, As a special promo deal, you've been selected to receive free entry to a premium adults only site You must be 18 to enjoy this offer, proof of age is required. Please go to: <A HREF="http://207.82.60.235/click792.asp"><A HREF="http://207.82.60.235/click792.asp</A">http://207.82.60.235/click792.asp</A</A>> FREE membership includes: 35 FREE LIVE video feeds = tell girls what to do! Secretary Cam = Hidden Cam looking up her skirt! Pee Cam = Hidden Toilet Camera Change Room Cam = Cameras in a change room Shower Cam = Lezbo Shower Feeds Gyno Clinic Cam = Rubber gloves in pussy! 12000 video feeds = right into your browser! <a href="<A HREF="http://207.82.60.235/click792.asp"><A HREF="http://207.82.60.235/click792.asp</A">http://207.82.60.235/click792.asp</A</A>>">Click Here</a> ================================================= To be removed from mailings of this type reply to this email with remove in the subject field. ================================================= - To get out of this list, please send email to majordomo(a)suse.com with this text in its body: unsubscribe suse-linux-e

1 0

[SuSE Linux] Star Office 5 and SuSE 5.3
by EGRETLURES＠kricket.net 01 Dec '98

01 Dec '98

I still can't get Star Office 5 to install under 5.3. The undefined symbol: _dl_profile is still plaguing me. This is for the libc.so.6. Has anyone else successfully installed SO5 with 5.3? The windows version installed under 95 and NT without any problems. If this package is going to compete under Linux with Office97 under NT/9X, then the installation will have to be smoother. TIA Henry - To get out of this list, please send email to majordomo(a)suse.com with this text in its body: unsubscribe suse-linux-e

1 0