Received: from darkside. (darkside. [210.8.201.180]) by mail. (Weasel v1.20) for ; 03 Aug 2001 01:00:00 From: "Digest" To: "OS/2GenAu Digest" Date: Fri, 03 Aug 2001 01:00:00 +1000 (EDT) Priority: Normal X-Mailer: CASMailer 1.0 for OS/2 Warp PPC 1.05 MIME-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Subject: [os2genau_digest] No. 137 Message-ID: <200108030100.000029G6atmail.> Reply-To: ianatos2site dot com Date:- 03 August 2001 1================================================ Date: Thu, 02 Aug 2001 13:41:27 +1100 (EDT) From: Dr Graham Norton FRACP Neurologist Subject: Re: [os2genau] Hacker questions Dear un-infected OS2 users out of interest, with all this excitement about virus and worms and hackers, now that we are on ADSL and with our Warp 4.5 box and Internet Gateway with Injoy Firewall running.... is there a way that I can perhaps regularly check to see if some one has attempted to hack into our Internet Gateway machine? Is there software that will perhaps alert me as soon as some one does this? thirdly now that we have ADSL it has freed up a COM port and so we can now use our UPS ! We have a rack mounted UPS but it is not actually set up to shut down the server cleanly . If we have a blackout in working hours, we are able to do this ourselves naturally but at night , the Battery runs out and bingo!! So do you know of reliable OS2 UPS type softeware and have you had any expericence on its installation? I may put this on the List au site as well as they are useful questions... Graham Norton FRACP Neurologist Smart Road Specialist Centre Modbury SA 5092 61 8 8265 4022 (Voice) 61 8 8386 1795 (Fax) gnatsmart-road dot com dot au 2============================================== From: "Ian Manners" Date: Thu, 02 Aug 2001 15:27:41 +1000 (EST) Subject: Re: [os2genau] Hacker questions Hi Graham >is there a way that I can perhaps regularly check to see if some one has attempted >to hack into our Internet Gateway machine? I wouldnt bother, you will probably end up getting between 2-10 hack attempts a day, people scanning FTP, TELNET, HTTP, HTTPS, SMTP, POP, SYSLOG and other ports. I also delete ALL unused programs/servers off my machines, ie, my firewall does not have pmtelnet telnet ftpd sendmail or other unused programs on it, this way, if someone does manage to get in, there is nothing for them to use, also, if they can then download a program, chances are they wont even realise that its OS/2, and there programs wont run :-) Feel free to send me your gateway.cf, firewall.cnf, and filters file for me to check if you like. If you arent using any externally accessable servers from inside, and you have your gateway hidden with NAT, you should be "reasonably" safe. >Is there software that will perhaps alert me as soon as some one does this? Yes but you will end up spending your day checking the logs, and answering those annoying "alerts". >thirdly now that we have ADSL it has freed up a COM port and so we can now use >our UPS ! We have a rack mounted UPS but it is not actually set up to shut down >the server cleanly . If we have a blackout in working hours, we are able to do this >ourselves naturally but at night , the Battery runs out and bingo!! So do you know of >reliable OS2 UPS type softeware and have you had any expericence on its >installation? What make and model UPS do you have ? >I may put this on the List au site as well as they are useful questions... ok Cheers Ian B Manners http://www.os2site dot com/ If at first you don't succeed, you are running about average. -- Bill Cosby 3============================================== Date: Thu, 02 Aug 2001 15:19:55 +1100 (EDT) From: Dr Graham Norton FRACP Neurologist Subject: Re: [os2genau] Hacker questions Thanks Ian its all a bit "scary" !! 2 or 3 times a day some one tries to hack the system!!! With regard to deleting the programs on the Gateway I shall do it but leave it to an expert to come on site as I presume that it is a bit more involved than deleting the object (icon) in the Internet utilities folder!!!! Shall also get my 'expert' to check the firewall files that you mention . thanks the UPS is a SOLA UPS 1050 520RM unit.. On Thu, 02 Aug 2001 15:27:41 +1000 (EST), Ian Manners wrote: >Hi Graham > >>is there a way that I can perhaps regularly check to see if some one has attempted >>to hack into our Internet Gateway machine? > >I wouldnt bother, you will probably end up getting between 2-10 hack attempts >a day, people scanning FTP, TELNET, HTTP, HTTPS, SMTP, POP, SYSLOG >and other ports. > >I also delete ALL unused programs/servers off my machines, ie, my firewall >does not have > >pmtelnet >telnet >ftpd >sendmail > >or other unused programs on it, this way, if someone does manage to get >in, there is nothing for them to use, also, if they can then download a >program, chances are they wont even realise that its OS/2, and there >programs wont run :-) > >Feel free to send me your gateway.cf, firewall.cnf, and filters file for me >to check if you like. If you arent using any externally accessable servers >from inside, and you have your gateway hidden with NAT, you should be >"reasonably" safe. > >>Is there software that will perhaps alert me as soon as some one does this? > >Yes but you will end up spending your day checking the logs, and answering >those annoying "alerts". > >>thirdly now that we have ADSL it has freed up a COM port and so we can now use >>our UPS ! We have a rack mounted UPS but it is not actually set up to shut down >>the server cleanly . If we have a blackout in working hours, we are able to do this >>ourselves naturally but at night , the Battery runs out and bingo!! So do you know of >>reliable OS2 UPS type softeware and have you had any expericence on its >>installation? > >What make and model UPS do you have ? > >>I may put this on the List au site as well as they are useful questions... > >ok > > >Cheers >Ian B Manners >http://www.os2site dot com/ > >If at first you don't succeed, you are running about average. > -- Bill Cosby > Graham Norton FRACP Neurologist Smart Road Specialist Centre Modbury SA 5092 61 8 8265 4022 (Voice) 61 8 8386 1795 (Fax) gnatsmart-road dot com dot au