Latest Virus Threats

31 Jan	W32/Sdbot-DJX
31 Jan	Mal/Renos-B
31 Jan	Mal/Padodor-B
31 Jan	JS/Dload-AZ
31 Jan	Troj/Dropper-TL
31 Jan	Troj/BatVfun-A

Scanpst.exe to Recover and Repair Outlook Personal Folders

Microsoft provides the Inbox Repair Tool for correcting most problems with damaged Personal Folders .pst files. If you do not see the Inbox Repair Tool on the Start menu, under Programs | Accessories | System Tools, use Start | Find or Start | Search (depending on your operating system) to search your system for Scanpst.exe.You will need to know the location of the .pst file that you want to repair. See Outlook & Exchange/Windows Messaging Backup and Dual-Boot for information on file locations and ways to determine the location of a .pst file that you can see in Outlook.

Helpful Commands to Connect to Wireless Access Point

First after booting up, you can always run dmesg | grep eth to make sure your wirless card is seen. Then if you are within range of an access point and you know the ESSID and WEP key, follow these commands. This is assumeing your wireless card is eth0.

root#ifconfig eth0 down
root#iwconfig eth0 essid "name of essid"
root#iwconfig eth0 key 0123456789

Then run iwconfig again to make sure the essid is showing, and you have a valid MAC showing. Now you bring the interface back up, by running

root#ifconfig eth0 up

Now, you need to obtain and IP address. Hopefully the access point has DHCP running, so run

root#dhcpcd eth0

or you can just remove the card and re-insert it and that should obtain an IP address, if your slack is set up to recieve DHCP. You can always run ifconfig and iwconfig to check the settings.

Samhain for SLES9

Samhain is a multiplatform, open source solution for centralized file integrity checking / host-based intrusion detection on POSIX systems (Unix, Linux, Cygwin/Windows). It has been designed to monitor multiple hosts with potentially different operating systems from a central location, although it can also be used as standalone application on a single host.

SOURCE

This is a tutorial on how to install and configure Samhain IDS for Suse Linux Enterprise Server 9.

Setup fetchmail, procmail, mutt, and gkrellm to recieve email

With the release of the new POP3 and SMTP support for gmail I decided to write a little tutorial describing how to use fetchmail, procmail, and mutt combined with gkrellm to remotely check and bring my mail from my gmail account to my local slackware box. Hope you enjoy.

Well first of all I run Slackware 10 with Fluxbox window manager. And all ready have gkrellm running off of a startup script that runs when my box boots up. So if you do not have this you need it. Do some research if need be inorder to get it running…it provides you with alot of good system info.

Using Swaret to update Slackware Packages

I have been testing the new swaret 1.7.0test4-1 and have found several things I like about it. So I created these steps that should have your slackware 10 up-to-date quickly.Begin by downloading the new release from http://swaret.sourceforge.net/modules.php?op=modload&name=Downloads&file=index&req=viewdownload&cid=1. Be sure to get the swaret-development package. It already comes in the .tgz extension, so once you have it downloaded run these commands.

Intrusion Detection Paper

Was google playing and came across this link about IDS>> http://totaldata.biz/TTalikkaPaper3.doc

I don’t think this guy meant to put all this info on the internet… or maybe he doesn’t even know google can find it.

SlackFire firewall for Slackers

$ whatis slackfire

SlackFire is an iptables script written especially for Slackware, my favourite Linux distribution in this corner of the Galaxy. The main purpose of the script is to protect a stand-alone machine or a small network with a stateful firewall. SlackFire isn’t perfect (yet) but have you seen a perfect iptables script? 
Anyway, I hope that README and this screenshot will give an idea of how it works and how it doesn’t.SlackFire may be freely used, modified, and distributed under the terms of the GNU General Public License with any Linux distribution except Caldera and those RedHat releases which are not legally available for free download.Source: http://slackfire.berlios.de/

ClamAV Antivirus for Slackware

The reason I decided to set this up was because firewall isn’t enough, even for linux. Remember teh firewall I wrote about a little while ago? ~~>Firewall Tutorial<~~ Well I was checking my logs and found that it was blocking a trojan trying to make an external connection to some outside ip, and another trying to make a connection to my internal gateway. So I’d thought I’d set this ClamAV up to scan my box to see what it came up with. As far as I know this is the only AntiVirus scanner for linux.

Social Engineering, how to protect yourself

Here is a link to a pretty indepth look at socail engineering against Information Systems by National Infrastructure Security Co-Ordination Centre.

SOURCE