Received: from darkside. (darkside. [210.8.201.180]) by 
 mail. (Weasel v1.20) for <deadmail>; 
 03 Aug 2001 01:00:00 
From: "Digest" <ianatos2site dot com>
To: "OS/2GenAu Digest" <deadmail>
Date: Fri, 03 Aug 2001 01:00:00 +1000 (EDT)
Priority: Normal
X-Mailer: CASMailer 1.0 for OS/2 Warp PPC 1.05
MIME-Version: 1.0
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Subject: [os2genau_digest] No. 137
Message-ID: <200108030100.000029G6atmail.>
Reply-To: ianatos2site dot com

Date:- 03 August 2001

1================================================

Date: Thu, 02 Aug 2001 13:41:27 +1100 (EDT)
From: Dr Graham Norton FRACP Neurologist <gnatsmart-road dot com dot au>
Subject: Re: [os2genau] Hacker questions

Dear  un-infected OS2 users


out of interest, with all this excitement about virus and worms and hackers,  now that 
we are on ADSL and with our Warp 4.5 box and Internet Gateway with Injoy Firewall 
running....

is there  a way that I can perhaps regularly check to see if some one has attempted 
to hack into our Internet Gateway machine? 

Is there  software that will perhaps alert me as soon as some one does this?


thirdly now that we have ADSL it has freed up a COM port and so we can now use 
our UPS !  We have a rack mounted UPS but it is not actually set up to  shut down 
the server cleanly . If we have a blackout in working hours, we are able to do this 
ourselves naturally but at night , the Battery runs out and bingo!!  So do you know of 
reliable OS2 UPS type softeware and have you had any expericence on its 
installation?


I may put this on the List au site as well as they are useful questions...


Graham Norton FRACP
Neurologist

Smart Road Specialist Centre
Modbury SA 5092

61 8 8265 4022  (Voice)
61 8 8386 1795 (Fax)
gnatsmart-road dot com dot au

2==============================================

From: "Ian Manners" <ianatos2site dot com>
Date: Thu, 02 Aug 2001 15:27:41 +1000 (EST)
Subject: Re: [os2genau] Hacker questions

Hi Graham

>is there  a way that I can perhaps regularly check to see if some one has attempted 
>to hack into our Internet Gateway machine? 

I wouldnt bother, you will probably end up getting between 2-10 hack attempts
a day, people scanning FTP, TELNET, HTTP, HTTPS, SMTP, POP, SYSLOG
and other ports.

I also delete ALL unused programs/servers off my machines, ie, my firewall
does not have

pmtelnet
telnet
ftpd
sendmail

or other unused programs on it, this way, if someone does manage to get
in, there is nothing for them to use, also, if they can then download a
program, chances are they wont even realise that its OS/2, and there
programs wont run :-)

Feel free to send me your gateway.cf, firewall.cnf, and filters file for me
to check if you like. If you arent using any externally accessable servers
from inside, and you have your gateway hidden with NAT, you should be
"reasonably" safe.

>Is there  software that will perhaps alert me as soon as some one does this?

Yes but you will end up spending your day checking the logs, and answering
those annoying "alerts".

>thirdly now that we have ADSL it has freed up a COM port and so we can now use 
>our UPS !  We have a rack mounted UPS but it is not actually set up to  shut down 
>the server cleanly . If we have a blackout in working hours, we are able to do this 
>ourselves naturally but at night , the Battery runs out and bingo!!  So do you know of 
>reliable OS2 UPS type softeware and have you had any expericence on its 
>installation?

What make and model UPS do you have ?

>I may put this on the List au site as well as they are useful questions...

ok


Cheers
Ian B Manners
http://www.os2site dot com/

If at first you don't succeed, you are running about average.
	-- Bill Cosby

3==============================================

Date: Thu, 02 Aug 2001 15:19:55 +1100 (EDT)
From: Dr Graham Norton FRACP Neurologist <gnatsmart-road dot com dot au>
Subject: Re: [os2genau] Hacker questions

Thanks Ian

its all a bit "scary" !!  2 or 3 times a day some one tries to hack the system!!!

With regard to deleting the programs on the Gateway I shall do it but leave it to an 
expert to come on site as I presume that it is a bit more involved than deleting the 
object (icon) in the Internet utilities folder!!!!  Shall also get my 'expert' to check the 
firewall files that you mention . thanks

the UPS is a SOLA UPS  1050  520RM  unit..





On Thu, 02 Aug 2001 15:27:41 +1000 (EST), Ian Manners wrote:

>Hi Graham
>
>>is there  a way that I can perhaps regularly check to see if some one has 
attempted 
>>to hack into our Internet Gateway machine? 
>
>I wouldnt bother, you will probably end up getting between 2-10 hack attempts
>a day, people scanning FTP, TELNET, HTTP, HTTPS, SMTP, POP, SYSLOG
>and other ports.
>
>I also delete ALL unused programs/servers off my machines, ie, my firewall
>does not have
>
>pmtelnet
>telnet
>ftpd
>sendmail
>
>or other unused programs on it, this way, if someone does manage to get
>in, there is nothing for them to use, also, if they can then download a
>program, chances are they wont even realise that its OS/2, and there
>programs wont run :-)
>
>Feel free to send me your gateway.cf, firewall.cnf, and filters file for me
>to check if you like. If you arent using any externally accessable servers
>from inside, and you have your gateway hidden with NAT, you should be
>"reasonably" safe.
>
>>Is there  software that will perhaps alert me as soon as some one does this?
>
>Yes but you will end up spending your day checking the logs, and answering
>those annoying "alerts".
>
>>thirdly now that we have ADSL it has freed up a COM port and so we can now 
use 
>>our UPS !  We have a rack mounted UPS but it is not actually set up to  shut down 
>>the server cleanly . If we have a blackout in working hours, we are able to do this 
>>ourselves naturally but at night , the Battery runs out and bingo!!  So do you know 
of 
>>reliable OS2 UPS type softeware and have you had any expericence on its 
>>installation?
>
>What make and model UPS do you have ?
>
>>I may put this on the List au site as well as they are useful questions...
>
>ok
>
>
>Cheers
>Ian B Manners
>http://www.os2site dot com/
>
>If at first you don't succeed, you are running about average.
>	-- Bill Cosby
>

Graham Norton FRACP
Neurologist

Smart Road Specialist Centre
Modbury SA 5092

61 8 8265 4022  (Voice)
61 8 8386 1795 (Fax)
gnatsmart-road dot com dot au

