swinog

swinog@lists.swinog.ch

2908 discussions

Today's beer event
by Steven Glogger 09 May '05

09 May '05

hi there as you may see: the weather is just bad and it's too cold :-( so the "pumpi" will not be the a good place today and we have to move to the backup-place: so, it's now fixed to: Next Event: Date: 9th of May 2005 Time: starting around 18.30 o'clock Location: we go to the "Outback" Bahnhof Stadelhofen for informations: http://swinog.mrmouse.ch greetings -steven

1 0

FYI: Invitation to www.hackiis6.com
by Marco Huggenberger 09 May '05

09 May '05

FYI: ---------- Forwarded message ---------- From: Roger A. Grimes <roger(a)banneretcs.com> Date: May 5, 2005 1:41 AM Subject: Invitation to www.hackiis6.com To: honeypots(a)securityfocus.com It's not the traditional honeypot...but it is. <grin> Welcome to the HackIIS6.com Contest! Starting May 2nd and going until June 8th, the server located at http://www.hackiis6.com will welcome hackers to attack it. If you can deface the web site or capture the "hidden" document, you win an X-box! Read contest rules for what does and doesn't constitute a successful hack. We've tried to be as realistic as possible in what constitutes a successful hack, and in mimicking a basic HTML and ASP.NET web site. For the most part, almost anything reasonable constitutes a successful attack except for a massive network denial of service attack against the IIS 6 or its host provider. Not that doing a successful DoS attack wouldn't be a problem in the real world...it would be...but we aren't testing that. We want to test the security of Windows Server 2003, IIS, and other Microsoft applications. So, please, respect this one rule of the contest so everyone can have a chance at claiming the prize. Questions and Prizes If you have questions, send an email to admin(a)hackiis6.com. If you want to claim a prize, send your email, with the details listed in the official rules to prizes(a)hackiis6.com. Contest Summary We are going to start the contest for the first two weeks with the very basic, static HTML web site that you are now reading. Two weeks later, we'll add an ASP.NET web site and a back-end SQL server to add more flavor and give more area to attack. We started with the basic site to prove that Microsoft's Internet Information Service (IIS) and Windows Server 2003 is secure by itself. This is to satisfy the purists who thinking hacking ASP.NET is hacking an application and not the server. So, if you've got skillz in one area versus the other, you'll have a chance to try both attack types. Once the contest stops on June 8th, we will announce the winner(s) at the upcoming June Microsoft Tech.Ed conference. The Setup This server is running Windows Server 2003, Service Pack1, with all current publicly-released patches and hotfixes installed (we ran Windows Update and MBSA just like a real admin would do). We installed IIS 6.0. and then we followed the basic recommendations (http://www.microsoft.com/technet/security/prodtech/IIS.mspx) suggested by Microsoft. I added a few tweaks here and there, to put my personal mark on the site, but nothing extraordinary. There is no non-Microsoft software involved with the exception of the host's router/firewall, which would be normal in most environments. We want to make this a test of Microsoft software. Why a hacking contest? To have fun! Sure there will be critics who say sponsoring a hacking contest proves nothing. If the IIS server remains unbroken, it still doesn't mean that IIS is really "secure." True, and if I wasn't the contest's team leader, I'd probably be the first one to yell that out. Hacking contests rarely prove something is secure, although it only takes a single successful hack to prove something is unsecure. So why do it? There are very few places on the Internet where hackers, good and bad, can hack legally. Windows IT Pro thought the contest would be a fun way to interact with the hacker community (they realize most hackers have good intentions) and bring some attention to Windows IT Pro (of course, they'll disavow all responsibility and blame me solely if the server gets hacked) <grin>. So, welcome to the contest! Hack away. If the IIS server goes unhacked during the extended time period, it might not mean that IIS is "unhackable", but if it does survive the contest it might convince a few people that it is a relatively secure web server platform. After all, over 20% of the Internet relies on it, including some of the largest web sites in the world. Happy Hacking, Roger A. Grimes Contributing editor, Windows IT Pro Magazine ************************************************************************ *** *Roger A. Grimes, Banneret Computer Security, Computer Security Consultant *CPA, CISSP, MCSE: Security (NT/2000/2003/MVP), CNE (3/4), CEH, CHFI *email: roger(a)banneretcs.com *cell: 757-615-3355 *Author of Malicious Mobile Code: Virus Protection for Windows by O'Reilly *http://www.oreilly.com/catalog/malmobcode *Author of Honeypots for Windows (Apress) *http://www.apress.com/book/bookDisplay.html?bID=281 ************************************************************************ **** -- Cheers M.

5 6

Urgent: Mailbombing from 'hostcenter' reseller.
by Benoit Panizzon 08 May '05

08 May '05

Dear Hostcenter responsibles. Sorry that I write to Swinog, but the Hostcenter phone support just didn't get the problem. One of your customers has again set up an autoresponder sending 'new' emails to every 'from' address it sees. We got about 10'000 new support tickets opened last night by this customer. Subject and everything is replaced, so that RT is not able to recognize the loop. Precedence: Bulk or Junk is missing so RT sends a reply too. This Hostcenter setup can wonderfully be abused to mailbomb any destination email address in an anonymous way. The Hostcenter support told me that this a reseller's host and so this is the reseller's problem and not theirs but that they are not allowed to give me contact info of that reseller... If somebody from Hostcenter reads this, and thinks about reconsidering this statement, please contact me asap: bp(a)imp.ch or 061 826 93 06. As I'm playing with the idea to start reporting those autoreplies to spamcop, but it's just a reseller's host, so normal customers are not affected. Isn't it? (mail03a.hostcenter.com) Regards -Benoit Panizzon- -- SPAM SPAM SPAM SPAM / Hormel's new miracle meat in a can Tastes fine, saves time. / If you want something grand, / Ask for SPAM! - Hormel's 1937 jingle for SPAM Hippopotomonstrosesquippedaliophobia Huhuhuhahahahaarrrrgh!

3 2

SwiNOG-BE25 - Beer Event 25 - 9th of May @ Restaurant Pumpstation @ Lake / Zurich
by Steven Glogger 03 May '05

03 May '05

hi all summertime is coming ,-) according to all the weather specialists it could be nice and sunny (and little bit cloudy) next monday. but every time I organized the BE at the lake it was just great weather. so I'm hoping that the luck will still be with us. so, what about some cool beer in a warm, sunny and cosy environment? ,-) the famous "pumpi" is already open and I expect many people coming for next week to enjoy it ,-) (if wireless LAN is working: don't ask me ;-)) so, the next event will be: Date: 9th of May 2005 Time: starting around 18.30 o'clock Location: @lake in restaurant "Pumpstation" (see image; www.pumpstation.ch) On bad weather (will be communicated before noon) we go to the "Outback" / Bahnhof Stadelhofen Registration deadline: 09.05.2005 09:00:00 Link for registration http://swinog.mrmouse.ch/ Important: If someone cannot find us: call me on my handy: 079 / 277 92 35 greetings -steven

1 0

Anyone else asked for MX-List by Verizon?
by Benoit Panizzon 25 Apr '05

25 Apr '05

Hi all 10 Days ago, the Verizon 'Whitelist' Team (without name of any responsible person) send an email to our NOC to get the list of MXes used in our domains. Apparently because they were blacklisting our IP-Range. (Which I couldn't notice according our mailserver logs.) So I wrote back to them to explain, that we have many fixed-ip customers operating own mailservers and to ask how we best would proceede. I never got an answer. Anyone else got contacted by verizon about that matter and got any reply? -Benoit- -- SPAM SPAM SPAM SPAM / Hormel's new miracle meat in a can Tastes fine, saves time. / If you want something grand, / Ask for SPAM! - Hormel's 1937 jingle for SPAM Hippopotomonstrosesquippedaliophobia Huhuhuhahahahaarrrrgh!

1 0

Visit of Billag AG at home !
by samuel clakre 25 Apr '05

25 Apr '05

Hi all, Sorry for my english ! Yesterday evening I had the visit of Billag AG at home. I have neither TV ,radios. I have just ADSL. I say to him that some time I to listen to the radios on the Internet. Cost it wanted to make me pay the royalty for the radios. Because I had a broad-band connection and a PC!!! I shine request papers official on what it wanted to tax me, it unfortunately had anything on him has to present to me. 3 slanging match after ! I say to him that when www.couleur3.ch is typed I have the radios without anything asked and without warned that I must pay billag to listen. It is to retract in me say that I had the subscription that it thought. It thought that I had the subscription of bluewin Internet + radios. Who has a url with these law of billag?? Regards sam -- Samuel Clarke _____________________________________ Cortex ISP S.A. Rue Alexandre-Gavard 16 CH - 1227 Carouge Tel : 0844 CORTEX (0844 267 839) Fax : +4122 307 78 11 http://www.cortex.ch

11 17

RE: [swinog] swisscom down ;o)
by Pedrazzini, Andre 22 Apr '05

22 Apr '05

ADSL -PANNE DIE ZWEITE Nach dem stundenlangen ADSL-Ausfall von letzter Woche blieben diesen Freitagmorgen zahlreiche ADSL-Kunden erneut vom Internet ausgesperrt. http://www.pctipp.ch/library/actions/go.asp?id=30159 cheers andre -----Original Message----- From: swinog-bounces(a)lists.swinog.ch [mailto:swinog-bounces@lists.swinog.ch]On Behalf Of Andre Oppermann Sent: Freitag, 15. April 2005 14:27 To: swinog(a)swinog.ch Subject: Re: [swinog] swisscom down ,-) Erich Hohermuth wrote: > > Hello > > > the facts: > > - about 50% of the adsl network went down, the rest was online without > > problems since weeks > > - layer1 link was down (from CPE side) > > If we have a short look on the Protocol Stack for BBCS ( Swinog #3 Page 14 > [1] ) only the DSLAM could have this type of error. Because it is a link > failure between the CPE and the DSLAM. Indeed. > The next tool which could have an impact on all DSLAM's in about 2 hours ( not > every layer1 was down on the same time) is either the monitoring tool or the > configuration deployment tool. Very likely. Or the new deployment tool triggered a bug in the Alcated DSLAMs. > As a side note: We still do not have access to the DSLAM Monitoring Tool which > is a requirement to make firstlevel support ! > > At the moment we still have customers complaining. > > Theorie1: > Someone wrote a "new" deployment script for the new BBCS release which > includes ***classified ***. I guess dynamic switching of DSL line speeds is not the best idea... One problem more to solve before all three things will play together. > Unfortunatly all DSLAM's were affected by this change. Guess what happens when the MPLS core breaks down. All the new stuff runs over the same core network (IPSS, BBCS and new CES). What will happen when the next SQL-Slammer strikes and blasts millions of packets into all these networks? Or there is a bug with MPLS or label distribution... Too many eggs in one baset if you ask me. At least the phone network will continue to work because at the moment it is based on TDM and SDH circuits. But for how long? -- Andre _______________________________________________ swinog mailing list swinog(a)lists.swinog.ch http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog

3 2

Search for a 3Com 3c597 EISA
by Marcel Stutz 22 Apr '05

22 Apr '05

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hi to all, I search for a NIC, if somewehre have to sale a 3Com 3c597 EISA please contact me offlist. Mit freundlichen Grüssen Marcel Stutz Netzwerk & Unix Administrator - ------------------------------------------------------------------ | Genotec Internet Consulting AG | E-Mail : marcel.stutz(a)genotec.ch Hegenheimermattweg 119a | Website : http://www.genotec.ch CH - 4123 Allschwil | -------------------------------- Schweiz | | Zentrale: +41 61 487 99 99 - ------------------------------- | Fax : +41 61 487 99 98 | Support : 0848 321 123 easy[hosting] | 500 MB, unl.Pointings, | -------------------------------- Subdomains und E-mails, | Supportanfragen bitte immer an Internetzugang und mehr | support(a)genotec.ch SFr. 150/Jahr | Web: http://support.genotec.ch | - ------------------------------------------------------------------ -----BEGIN PGP SIGNATURE----- Version: PGP 8.1 iQA/AwUBQmkQpm67Rst+AWkCEQKk+wCgk0z6QC+WSmHc7ug3GKrPy1/UKXQAnj4h PAjHyGiYj9Hv9cfbLIYF3swu =pqjC -----END PGP SIGNATURE-----

1 0

AW: [swinog] Visit of Billag AG at home !
by xaerni＠pop.ch 22 Apr '05

22 Apr '05

Since begin of the 2005, you must pay billag Radio too, if you can receive any Radioprogramms by streeming. 2nd thing. You must paying the billag if you have installed a Version of Mediaplayer, which can receiving any Steamings.... This is the newst thin... Also new is If you have installed a version which can you receive Videosteams you must paying Billag for TV receiving... 14 days ago the Billag has send the new Version for TV receiptions. You mustn't pay if you have a Firewall, wich are the Steaming Ports blocked.... -----Ursprüngliche Nachricht----- Von: swinog-bounces(a)lists.swinog.ch [mailto:swinog-bounces@lists.swinog.ch]Im Auftrag von samuel clakre Gesendet: Freitag, 22. April 2005 15:02 An: swinog(a)swinog.ch Betreff: [swinog] Visit of Billag AG at home ! Hi all, Sorry for my english ! Yesterday evening I had the visit of Billag AG at home. I have neither TV ,radios. I have just ADSL. I say to him that some time I to listen to the radios on the Internet. Cost it wanted to make me pay the royalty for the radios. Because I had a broad-band connection and a PC!!! I shine request papers official on what it wanted to tax me, it unfortunately had anything on him has to present to me. 3 slanging match after ! I say to him that when www.couleur3.ch is typed I have the radios without anything asked and without warned that I must pay billag to listen. It is to retract in me say that I had the subscription that it thought. It thought that I had the subscription of bluewin Internet + radios. Who has a url with these law of billag?? Regards sam

1 0

OT: Nokia Firewall IP330 to sell
by Dominik Friberg 22 Apr '05

22 Apr '05

we have two nokia firewalls IP330 to sell (price: open - make an offer) interested contact me offlist please regards dominik

1 0

Jump to page:

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

swinog