- USR-TC - mailman.xmission.com

(usr-tc) stalling
by Jamie Orzechowski 16 Aug '99

16 Aug '99

Many of our users seem to be having a "stalling" problem. They will be going fine and all of the sudden there is a 2 minute stop. They are not disconnected ... they bytes in/out just stop ... then 2 minutes later it picks up again and everything is fine ... then another stoppage at a random time ... any ideas?? DSP -> 2.0.70 ARC -> 4.2.29 - To unsubscribe to usr-tc, send an email to "majordomo(a)xmission.com" with "unsubscribe usr-tc" in the body of the message. For information on digests or retrieving files and old messages send "help" to the same address. Do not use quotes in your message.

3 2

Re: (usr-tc) HiperARC - Dangerous HiperBomb
by Rick 16 Aug '99

16 Aug '99

I can confirm this security-bug EXISTS. I compiled the source of hyper-nuke and did indeed reboot some of my arcs (4.1.59-6). As others have stated I would suggest implementing accesslists on your routers that deny all telnet (tcp-25) traffic to your arcs. Ed Taylor wrote: > For HiperBomb code check out: > > http://www.securityfocus.com/templates/archive.pike?list=1 > > It is very serious and reboots the HiperArc's from anywhere. > > Ed > > ---------- Original Message ---------------------------------- > From: "Jamie Orzechowski" <mhz(a)ripnet.com> > Reply-To: usr-tc(a)lists.xmission.com > Date: Fri, 13 Aug 1999 19:03:36 -0400 > > >Just reading my Securityfocus email list and attacked was a new "Remote > HiPER ARC nuking program" > > I have the source if anyone cares to have it ... > > ----- Original Message ----- > From: Jonathan Chapman <jchapman(a)1ST.NET> > To: <BUGTRAQ(a)SECURITYFOCUS.COM> > Sent: Thursday, August 12, 1999 6:10 PM > Subject: 3com hiperarch flaw [hiperbomb.c] > > > Hello, > > > > The attached program will reboot a 3com HiperARC. I made an attempt to > > contact 3com before posting this report, however, I received no response. > > By flooding the telnet port of a 3com HiperARC using the provided program, > > the HiperARC unconditionally reboots. This program is effective over all > > interfaces, including a dialup. > > > > Regards, > > > > Jonathan Chapman > > Director of Network Security > > FIRST Incorporated > > jchapman(a)1st.net www.1st.net > > - > To unsubscribe to usr-tc, send an email to "majordomo(a)xmission.com" > with "unsubscribe usr-tc" in the body of the message. > For information on digests or retrieving files and old messages send > "help" to the same address. Do not use quotes in your message. > > - > To unsubscribe to usr-tc, send an email to "majordomo(a)xmission.com" > with "unsubscribe usr-tc" in the body of the message. > For information on digests or retrieving files and old messages send > "help" to the same address. Do not use quotes in your message. -- -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- Rick Allan / rick(a)monmouth.com | Connect to a Backbone not a Wishbone Head of Network Engineering | Monmouth Internet Corporation 732-842-5366=====extension 102 | http://www.monmouth.com -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- - To unsubscribe to usr-tc, send an email to "majordomo(a)xmission.com" with "unsubscribe usr-tc" in the body of the message. For information on digests or retrieving files and old messages send "help" to the same address. Do not use quotes in your message.

8 13

(usr-tc) Security and Accounting Server vs. SAM questions
by Howard Reeves 15 Aug '99

15 Aug '99

I am trying to decide whether to enter my users in the Security and Accounting database or to proxy against the NT database. I am currently entering the username in both NT and S&A and using the NT password. I did this because my only server at the time had been setup as a standalone server instead of a PDC so I could not proxy to the NT database. Also, I use NT Mail and by using the NT database, NT Mail could authenicate against the NT database. I am now adding an additional server that has been setup as a PDC. I plan to reconfigure the standalone server as a BDC when I have the new server up and running. This is why I am currently contemplating this question. I want to make the best decision that I can so that it works now and in the future as I add to the network. I do not want to just do what is easiest right now. However, I can not afford to invest in new RADIUS software at this time which is what I would probably really like to do, and do not now enough about Liniux to switch which is what I would probably really really like to do. My reasons for wanting to use NT database. 1. NT Mail can authenicate against NT database reducing the amount of setup required for each user. 2. Can remotely administer username and passwords with web interface. 3. Can operate a back up server. My reasons for not wanting to use NT database. 1. I have no way that I know of to print information about users i.e. username, Name, Address, Telephone Number, etc. 2. No way to limit concurrent users. 3. Concerns about the security of using NT database. My reasons for wanting to use S&A 1. Can print information about users from access reports. 2. Supposedly can limit concurrent users. 3. Believe that it is more secure than using NT database. My reasons for not wanting to use S&A 1. Can not administer user names and passwords through a web interface. 2. Not sure if I can operate a backup server. 3. Do not know how to set NT Mail to authenicate against S&A database. I believe that it can be done with a DLL file, but I have not found any documentation to explain how to do it. I am very open to any ideas or suggestion that anyone might have including other RADIUS software that might meet my needs. Any help will be appreciated. Howard Reeves hreeves(a)altamontks.com - To unsubscribe to usr-tc, send an email to "majordomo(a)xmission.com" with "unsubscribe usr-tc" in the body of the message. For information on digests or retrieving files and old messages send "help" to the same address. Do not use quotes in your message.

1 0

(usr-tc) disabling telnet
by Jamie Orzechowski 14 Aug '99

14 Aug '99

what is the command to disable telnet on an arc anyways?? - To unsubscribe to usr-tc, send an email to "majordomo(a)xmission.com" with "unsubscribe usr-tc" in the body of the message. For information on digests or retrieving files and old messages send "help" to the same address. Do not use quotes in your message.

3 2

(usr-tc) Need X2 keys for NMC
by Len Pikulski 14 Aug '99

14 Aug '99

Any resources would be greatly appreciated. Thanks <*><*><*><*><*><*><*><*><*><*><*><*><*><*><*><*><*><*><*><*><*><*><*> Len Pikulski lenp(a)nothinbut.net (856) 222-1514 http://www.nothinbut.net - To unsubscribe to usr-tc, send an email to "majordomo(a)xmission.com" with "unsubscribe usr-tc" in the body of the message. For information on digests or retrieving files and old messages send "help" to the same address. Do not use quotes in your message.

2 1

Re: (usr-tc) HiperARC - Dangerous HiperBomb
by pferraro＠wna-linknet.com 14 Aug '99

14 Aug '99

Is there a way to deny access to the port, but allow only certain IPS to telnet to it? ============================================================================== Phillip Ferraro WorldNet Access, Inc pferraro(a)wna-linknet.com Onslow County's PREMIER InterNet Service Voice (910) 346-0835 824 Gumbranch Square, Suite R3 FAX (910) 455-1933 Jacksonville, Nc 28540-6269 ============================================================================== On Fri, 13 Aug 1999, Ed Taylor wrote: > For HiperBomb code check out: > > http://www.securityfocus.com/templates/archive.pike?list=1 > > It is very serious and reboots the HiperArc's from anywhere. > > > Ed > > > ---------- Original Message ---------------------------------- > From: "Jamie Orzechowski" <mhz(a)ripnet.com> > Reply-To: usr-tc(a)lists.xmission.com > Date: Fri, 13 Aug 1999 19:03:36 -0400 > > >Just reading my Securityfocus email list and attacked was a new "Remote > HiPER ARC nuking program" > > I have the source if anyone cares to have it ... > > ----- Original Message ----- > From: Jonathan Chapman <jchapman(a)1ST.NET> > To: <BUGTRAQ(a)SECURITYFOCUS.COM> > Sent: Thursday, August 12, 1999 6:10 PM > Subject: 3com hiperarch flaw [hiperbomb.c] > > > > Hello, > > > > The attached program will reboot a 3com HiperARC. I made an attempt to > > contact 3com before posting this report, however, I received no response. > > By flooding the telnet port of a 3com HiperARC using the provided program, > > the HiperARC unconditionally reboots. This program is effective over all > > interfaces, including a dialup. > > > > Regards, > > > > Jonathan Chapman > > Director of Network Security > > FIRST Incorporated > > jchapman(a)1st.net www.1st.net > > > > - > To unsubscribe to usr-tc, send an email to "majordomo(a)xmission.com" > with "unsubscribe usr-tc" in the body of the message. > For information on digests or retrieving files and old messages send > "help" to the same address. Do not use quotes in your message. > > > - > To unsubscribe to usr-tc, send an email to "majordomo(a)xmission.com" > with "unsubscribe usr-tc" in the body of the message. > For information on digests or retrieving files and old messages send > "help" to the same address. Do not use quotes in your message. > - To unsubscribe to usr-tc, send an email to "majordomo(a)xmission.com" with "unsubscribe usr-tc" in the body of the message. For information on digests or retrieving files and old messages send "help" to the same address. Do not use quotes in your message.

3 3

Re: (usr-tc) HiperARC - Dangerous HiperBomb
by Jamie Orzechowski 13 Aug '99

13 Aug '99

I have blocked telnet access to the Class C which my arcs site on as a temporary fix ... ----- Original Message ----- From: Ed Taylor <ed(a)taylors.com> To: <usr-tc(a)lists.xmission.com> Sent: Friday, August 13, 1999 7:50 PM Subject: (usr-tc) HiperARC - Dangerous HiperBomb > For HiperBomb code check out: > > http://www.securityfocus.com/templates/archive.pike?list=1 > > It is very serious and reboots the HiperArc's from anywhere. > > > Ed > > > ---------- Original Message ---------------------------------- > From: "Jamie Orzechowski" <mhz(a)ripnet.com> > Reply-To: usr-tc(a)lists.xmission.com > Date: Fri, 13 Aug 1999 19:03:36 -0400 > > >Just reading my Securityfocus email list and attacked was a new "Remote > HiPER ARC nuking program" > > I have the source if anyone cares to have it ... > > ----- Original Message ----- > From: Jonathan Chapman <jchapman(a)1ST.NET> > To: <BUGTRAQ(a)SECURITYFOCUS.COM> > Sent: Thursday, August 12, 1999 6:10 PM > Subject: 3com hiperarch flaw [hiperbomb.c] > > > > Hello, > > > > The attached program will reboot a 3com HiperARC. I made an attempt to > > contact 3com before posting this report, however, I received no response. > > By flooding the telnet port of a 3com HiperARC using the provided program, > > the HiperARC unconditionally reboots. This program is effective over all > > interfaces, including a dialup. > > > > Regards, > > > > Jonathan Chapman > > Director of Network Security > > FIRST Incorporated > > jchapman(a)1st.net www.1st.net > > > > - > To unsubscribe to usr-tc, send an email to "majordomo(a)xmission.com" > with "unsubscribe usr-tc" in the body of the message. > For information on digests or retrieving files and old messages send > "help" to the same address. Do not use quotes in your message. > > > - > To unsubscribe to usr-tc, send an email to "majordomo(a)xmission.com" > with "unsubscribe usr-tc" in the body of the message. > For information on digests or retrieving files and old messages send > "help" to the same address. Do not use quotes in your message. > > - To unsubscribe to usr-tc, send an email to "majordomo(a)xmission.com" with "unsubscribe usr-tc" in the body of the message. For information on digests or retrieving files and old messages send "help" to the same address. Do not use quotes in your message.

2 1