archives: network security without firewalls From: Mikey <mraeder@payneservices.com>

-- 
Joey Kelly
< Minister of the Gospel | Computer Networking Consultant >
http://joeykelly.dhs.org
"When Government fears the people, it's liberty.
When people fear the Government, it's tyranny."
-- Benjamin Franklin

attached mail follows:

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Hi,

Let's hypothesize that I have a virgin box connected to the 'net.
Character-mode; no X, no ftpd, telnetd, httpd, r*d, sunrpc, etc.

Is the box safe from black hackers and script kiddies? After all,
how can the box be rooted if nothing is listening on ports?

(Yes, in that configuration it's useless; once the firewall is
configured, daemons will be started.)

Thanks
- --
+------------------------------------------------------------+
| Ron Johnson, Jr. Home: ron.l.johnson@home.com |
| Jefferson, LA USA http://ronandheather.dhs.org |
| |
! Thanks to the good people in Microsoft, a great deal of |
! the data that flows is dependent on one company. That is |
! not a healthy ecosystem. The issue is that creativity gets |
! filtered through the business plan of one company. |
! Mitchell Baker, "Chief Lizard Wrangler" at Mozilla |
+------------------------------------------------------------+
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.0.6 (GNU/Linux)
Comment: For info see http://www.gnupg.org

iD8DBQE8GjZVjTz5dS9Us5wRAse6AJ9P2hlouGLcBPekeEw9CFkCSJRqGQCfUftQ
QKYgcGUFog6YhOHZe1qAhtk=
=LowW
-----END PGP SIGNATURE-----
___________________
Nolug mailing list
nolug@nolug.org

attached mail follows:

Are you SURE no daemons are running? nmap it from outside and see.
or take a look at "netstat -a | grep LIST" or "lsof -i | grep LIST"
to find out which processes are listening and where.

On Fri, Dec 14, 2001 at 11:26:45AM -0600, Ron Johnson wrote:
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
>
> Hi,
>
> Let's hypothesize that I have a virgin box connected to the 'net.
> Character-mode; no X, no ftpd, telnetd, httpd, r*d, sunrpc, etc.
>
> Is the box safe from black hackers and script kiddies? After all,
> how can the box be rooted if nothing is listening on ports?
>
> (Yes, in that configuration it's useless; once the firewall is
> configured, daemons will be started.)
>
> Thanks
> - --
> +------------------------------------------------------------+
> | Ron Johnson, Jr. Home: ron.l.johnson@home.com |
> | Jefferson, LA USA http://ronandheather.dhs.org |
> | |
> ! Thanks to the good people in Microsoft, a great deal of |
> ! the data that flows is dependent on one company. That is |
> ! not a healthy ecosystem. The issue is that creativity gets |
> ! filtered through the business plan of one company. |
> ! Mitchell Baker, "Chief Lizard Wrangler" at Mozilla |
> +------------------------------------------------------------+
> -----BEGIN PGP SIGNATURE-----
> Version: GnuPG v1.0.6 (GNU/Linux)
> Comment: For info see http://www.gnupg.org
>
> iD8DBQE8GjZVjTz5dS9Us5wRAse6AJ9P2hlouGLcBPekeEw9CFkCSJRqGQCfUftQ
> QKYgcGUFog6YhOHZe1qAhtk=
> =LowW
> -----END PGP SIGNATURE-----
> ___________________
> Nolug mailing list
> nolug@nolug.org

-- 
Scott Harney<scotth@scottharney.com>
 PGP Key fingerprint = 6D 31 C3 00 77 8C D1 C2 59 0A 01 E3 AF 81 94 63
___________________
Nolug mailing list
nolug@nolug.org

attached mail follows:

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On Friday 14 December 2001 01:12 pm, Scott Harney wrote:
> Are you SURE no daemons are running? nmap it from outside and see.
> or take a look at "netstat -a | grep LIST" or "lsof -i | grep LIST"
> to find out which processes are listening and where.

Well, this is hypothetical for now, but when I upgrade my firewall
from kernel 2.2 to 2.4, there will be a time when iptables won't
be installed, and I obviously don't want to be rooted while working
on the rules.

> On Fri, Dec 14, 2001 at 11:26:45AM -0600, Ron Johnson wrote:
> > -----BEGIN PGP SIGNED MESSAGE-----
> > Hash: SHA1
> >
> > Hi,
> >
> > Let's hypothesize that I have a virgin box connected to the 'net.
> > Character-mode; no X, no ftpd, telnetd, httpd, r*d, sunrpc, etc.
> >
> > Is the box safe from black hackers and script kiddies? After all,
> > how can the box be rooted if nothing is listening on ports?
> >
> > (Yes, in that configuration it's useless; once the firewall is
> > configured, daemons will be started.)
> >
> > Thanks
> > - --

- --
+------------------------------------------------------------+
| Ron Johnson, Jr. Home: ron.l.johnson@home.com |
| Jefferson, LA USA http://ronandheather.dhs.org |
| |
! Thanks to the good people in Microsoft, a great deal of |
! the data that flows is dependent on one company. That is |
! not a healthy ecosystem. The issue is that creativity gets |
! filtered through the business plan of one company. |
! Mitchell Baker, "Chief Lizard Wrangler" at Mozilla |
+------------------------------------------------------------+
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.0.6 (GNU/Linux)
Comment: For info see http://www.gnupg.org

iD8DBQE8GmIXjTz5dS9Us5wRAiNXAJ0dncMQn+KleWwSMd6XuJx4OFKAMwCfdRiv
epY0smFDHomiQAMFwDu1WYY=
=DF2A
-----END PGP SIGNATURE-----
___________________
Nolug mailing list
nolug@nolug.org

attached mail follows:

Scott Harney wrote:
>
> Are you SURE no daemons are running? nmap it from outside and see.
> or take a look at "netstat -a | grep LIST" or "lsof -i | grep LIST"
> to find out which processes are listening and where.

#>kill -9 `ps -augxw|awk '{print $2}'`

?8^)

-- 
Since-beer-leekz,       |If this were an actual emergency,  
Mikey                   |we would have all fled in terror, .
http://24.17.118.246:81 |and you would not have been notified
___________________
Nolug mailing list
nolug@nolug.org

attached mail follows:

uh how about "#kill -9 1" ?

On Fri, Dec 14, 2001 at 02:54:43PM -0500, Mikey wrote:
> Scott Harney wrote:
> >
> > Are you SURE no daemons are running? nmap it from outside and see.
> > or take a look at "netstat -a | grep LIST" or "lsof -i | grep LIST"
> > to find out which processes are listening and where.
>
> #>kill -9 `ps -augxw|awk '{print $2}'`
>
> ?8^)
> --
> Since-beer-leekz, |If this were an actual emergency,
> Mikey |we would have all fled in terror, .
> http://24.17.118.246:81 |and you would not have been notified
> ___________________
> Nolug mailing list
> nolug@nolug.org

-- 
Scott Harney<scotth@scottharney.com>
 PGP Key fingerprint = 6D 31 C3 00 77 8C D1 C2 59 0A 01 E3 AF 81 94 63
___________________
Nolug mailing list
nolug@nolug.org

attached mail follows:

Scott Harney wrote:
>
> uh how about "#kill -9 1" ?

But I want to make them die /slowly/.

:)

-- 
Since-beer-leekz,       |If this were an actual emergency,  
Mikey                   |we would have all fled in terror
http://24.17.118.246:81 |and you would not have been notified
___________________
Nolug mailing list
nolug@nolug.org