Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email email@example.com
From: Prabu Subroto (prabu_subroto_at_yahoo.com)
Date: Fri Feb 28 2003 - 08:27:15 CST
It is embarassing.....:(
I will do that again if the problem happened again. I
will grep correctly.
--- Ian David Laws <ianthe-laws-clan.de> wrote:
> Hi Prabu
> you see that it is ssh if you look at the
> destination port DST it is 22 or SSH
> ---------- Forwarded Message ----------
> Subject: RE: [suse-security] My SuSEFirewall blocks
> something than my LAM can
> not surfing in internet anymore.
> Date: Fri, 28 Feb 2003 06:01:33 -0800 (PST)
> From: Prabu Subroto <prabu_subrotoyahoo.com>
> To: SuSE Security Milis <suse-securitysuse.com>
> Dear Peer....
> I tried the command line from you. But the output is
> I grep nothing...
> I will repeat this threat from you if the problem
> comes again.
> Btw, how can you know that what I send to you was
> Please help me, I am stucked...
> --- Peer Stefan <stefan.peertiwag.at> wrote:
> > Hi Prabu,
> > Sorry to say so, but this trace shows nothing more
> > than a connection-trace of your ssh-session
> > ...).
> > Don't tail /var/log/messages, it's quite big and
> > gets filled really fast.
> > Do a "cat /var/log/messages|grep DTP=80|grep -v
> > DST=192.168.23.10" in order to get all the
> > http-stuff.
> > so long,
> > Stefan
> > btw. I'm called Stefan - it's a bit queer here in
> > Austria, we always put the last name in front ;-)
> > > From: Prabu Subroto
> > [mailto:prabu_subrotoyahoo.com]
> > > Dear my friend, Peer...
> > >
> > > Today morning, it happened again. I follow your
> > advice
> > > and this is the 60 lines of my
> > > file:
> > > "
> > > proxy:/var/log # tail -n 60 messages
> > > Feb 27 14:04:49 proxy kernel:
> > > SuSE-FW-ACCEPT-ALL-INTERNAL IN=eth0 OUT=
> > > MAC=00:50:bf:77:77:d5:00:50:bf:77:80:49:08:00
> > > SRC=192.168.23.237 DST=192.168.23.10 LEN=52
> > TOS=0x10
> > > PREC=0x00 TTL=64 ID=4343 DF PROTO=TCP SPT=1132
> > DPT=22
> Check the headers for your unsubscription address
> For additional commands, e-mail:
> Security-related bug reports go to securitysuse.de,
> not here
Do you Yahoo!?
Yahoo! Tax Center - forms, calculators, tips, more
-- Check the headers for your unsubscription address For additional commands, e-mail: suse-security-helpsuse.com Security-related bug reports go to securitysuse.de, not here