Re: Have I been hacked?

2015-01-09 Thread scott
On 01/10/2015 12:01 AM, Jerry Stuckle wrote: > On 1/9/2015 10:24 PM, scott wrote: >> On 01/09/2015 09:19 PM, Jerry Stuckle wrote: >>> On 1/9/2015 8:49 PM, Joel Rees wrote: On Fri, Jan 9, 2015 at 6:25 PM, Martin Steigerwald wrote: > Am Freitag, 9. Januar 2015, 00:24:06 schrieb Brian:

Re: Have I been hacked?

2015-01-09 Thread Jerry Stuckle
On 1/9/2015 10:24 PM, scott wrote: > On 01/09/2015 09:19 PM, Jerry Stuckle wrote: >> On 1/9/2015 8:49 PM, Joel Rees wrote: >>> On Fri, Jan 9, 2015 at 6:25 PM, Martin Steigerwald >>> wrote: Am Freitag, 9. Januar 2015, 00:24:06 schrieb Brian: > On Thu 08 Jan 2015 at 22:36:46 +0100, Martin

RE: Unable to join the Debian User Forum; appears that all IPs are being black-listed.

2015-01-09 Thread Wayne Hartell
Bob, Trying my best with the trimming; I'll keep observing how other people do it and try to learn from that. > > It does work in other Linux distros that I have tried. > > If it works anywhere then it should be possible to learn why and/or why not and > to transfer that knowledge. > > The othe

Re: Have I been hacked?

2015-01-09 Thread scott
On 01/09/2015 09:19 PM, Jerry Stuckle wrote: > On 1/9/2015 8:49 PM, Joel Rees wrote: >> On Fri, Jan 9, 2015 at 6:25 PM, Martin Steigerwald >> wrote: >>> Am Freitag, 9. Januar 2015, 00:24:06 schrieb Brian: On Thu 08 Jan 2015 at 22:36:46 +0100, Martin Steigerwald wrote: > Am Donnerstag, 8.

Re: Have I been hacked?

2015-01-09 Thread Jerry Stuckle
On 1/9/2015 8:49 PM, Joel Rees wrote: > On Fri, Jan 9, 2015 at 6:25 PM, Martin Steigerwald > wrote: >> Am Freitag, 9. Januar 2015, 00:24:06 schrieb Brian: >>> On Thu 08 Jan 2015 at 22:36:46 +0100, Martin Steigerwald wrote: Am Donnerstag, 8. Januar 2015, 14:20:27 schrieb Jerry Stuckle: >

Re: Have I been hacked?

2015-01-09 Thread Joel Rees
On Fri, Jan 9, 2015 at 6:25 PM, Martin Steigerwald wrote: > Am Freitag, 9. Januar 2015, 00:24:06 schrieb Brian: >> On Thu 08 Jan 2015 at 22:36:46 +0100, Martin Steigerwald wrote: >> > Am Donnerstag, 8. Januar 2015, 14:20:27 schrieb Jerry Stuckle: >> > > Just ensure you're using good security pract

Tip: Search Command Line Commands w/First Letters And Tab

2015-01-09 Thread Cindy-Sue Causey
On 5/2/14, Ralf Mardorf wrote: > > Ok, if I don't remember the complete command name and I like to use the > tab key to show me a list of available commands (r typing the complete > command name is to much work, then I first type the first characters > without sudo, push the tab key and after that

Re: Have I been hacked?

2015-01-09 Thread Joel Rees
2015/01/09 23:46 "Danny" : > > > > > You have completely failed to understand what fail2ban is telling you. > > > > > Anyway, I have decided to get new hardware and do a clean install of > > > everything > > > ... as many of you have suggested ... > > > > It was heading that way so it is probably

Re: _COMPLETE_ instructions for debootstrap &/or multistrap

2015-01-09 Thread Joel Rees
2015/01/09 6:40 "Cindy-Sue Causey" : > > [...] > > As an aside and yet really directly related, my complaints and > observations a while back about the seeming uptick in people having > trouble with incompatibility became more clear in the last few weeks. > There's some what *FEELS LIKE* bad advice

Re: Unable to join the Debian User Forum; appears that all IPs are being black-listed.

2015-01-09 Thread Lisi Reisz
On Friday 09 January 2015 22:35:45 Bob Proulx wrote: > And also good editor skills of trimming out unneeded excess quoting. > Be brutal with removing excess quotes!  Personally I would rather see > no previous quoted material rather than bad full quoting.  Want to see > what the message looks like

Re: Unable to join the Debian User Forum; appears that all IPs are being black-listed.

2015-01-09 Thread Joris Bolsens
On 01/09/2015 07:20 AM, Wayne Hartell wrote: > [snip] > Yes, you're right I am using Outlook since I've signed up to this list on a > virtual machine that is configured for taking on the road for my work. I > haven't yet taken a look at Evolution and others e-mail clients, but I fear > that I'll

Re: Unable to join the Debian User Forum; appears that all IPs are being black-listed.

2015-01-09 Thread Bob Proulx
Hi Wayne, Wayne Hartell wrote: > Thanks. I'm sure to violate some conventions here in reply format or what > have you. Just let me know if I do and I'll try to remedy in future. I see you have already exchanged mail concerning one of those things. :-) There are 2,000+ subscribers on this mailing

Re: Have I been hacked?

2015-01-09 Thread Jerry Stuckle
On 1/9/2015 4:37 PM, Bob Holtzman wrote: > On Fri, Jan 09, 2015 at 10:49:49AM -0500, Jerry Stuckle wrote: > >snip... >> >> SSH passwords are very safe, if they are long enough. For instance, if >> you have a 10 character password, mixed case and numbers (no special >> characte

Re: Have I been hacked?

2015-01-09 Thread John Hasler
Bob Holtzman writes: > That's the key phrase, "to cover all possibilities" Don't forget, it's > possible to hit pay dirt on the first try And it's about equally likely that a burst of cosmic rays of just the right pattern will strike your computer so as to reconfigure it to allow passwordless root

Re: test VMs

2015-01-09 Thread Bob Proulx
Bonno Bloksma wrote: > I was thinking I could run something which Debian Install runs too > but then later realized that probably depends on files like ssh keys > not being present yet and only creating new keys when that is the > case. There isn't anything that runs later that does this in the de

Re: How can g++ (stable) be incompatible with a fresh stable install?

2015-01-09 Thread The Wanderer
On 01/09/2015 at 03:57 PM, Sven Hartge wrote: > Kynn Jones wrote: > >> On Thu, Jan 8, 2015 at 7:18 PM, Sven Hartge >> wrote: >> >>> Kynn Jones wrote: >>> Your priorities for the different versions seem off. Security >>> should have to same priority as stable, not a higher one. >>> >>> And s

Re: help in purging old packages

2015-01-09 Thread Gary Dale
On 09/01/15 11:23 AM, Comer Duncan wrote: Hi, I have a situation in which I am running wheezy 7.7 and for various reasons now want to purge all packages which for some reason are still present from etch, lenny, and squeeze. What I would like to know is how can I purge all such packages using

Re: Have I been hacked?

2015-01-09 Thread Bob Holtzman
On Fri, Jan 09, 2015 at 10:49:49AM -0500, Jerry Stuckle wrote: snip... > > SSH passwords are very safe, if they are long enough. For instance, if > you have a 10 character password, mixed case and numbers (no special > characters), a brute force attack of 100 attempts per seco

Re: How can g++ (stable) be incompatible with a fresh stable install?

2015-01-09 Thread Sven Hartge
Kynn Jones wrote: > On Thu, Jan 8, 2015 at 7:18 PM, Sven Hartge wrote: >> Kynn Jones wrote: >>> libc6-dev: >>> Installed: (none) >>> Candidate: 2.13-38+deb7u4 >>> Version table: >>> 2.19-13 0 >>> 750 http://debian.csail.mit.edu/debian/ testing/main amd

Re: Have I been hacked?

2015-01-09 Thread Ric Moore
On 01/09/2015 11:29 AM, Danny wrote: I am an Aircraft Engineer by trade not a Computer Scientist Have you considered that alone would make you a tasty bit to hack, and for that reason, if you have anything tasty on your machine, you REALLY need to clear it up soonest with a complete re-insta

Re: Have I been hacked?

2015-01-09 Thread Brian
On Fri 09 Jan 2015 at 16:19:39 +, Eduardo M KALINOWSKI wrote: > On Sex, 09 Jan 2015, Jerry Stuckle wrote: > >SSH passwords are very safe, if they are long enough. For instance, if > >you have a 10 character password, mixed case and numbers (no special > >characters), a brute force attack of 1

Re: How can g++ (stable) be incompatible with a fresh stable install?

2015-01-09 Thread Kynn Jones
On Thu, Jan 8, 2015 at 7:18 PM, Sven Hartge wrote: > Kynn Jones wrote: > >> libc6-dev: >> Installed: (none) >> Candidate: 2.13-38+deb7u4 >> Version table: >> 2.19-13 0 >> 750 http://debian.csail.mit.edu/debian/ testing/main amd64 >> Packages >>

Re: Have I been hacked?

2015-01-09 Thread Brian
On Fri 09 Jan 2015 at 10:41:02 -0500, Jerry Stuckle wrote: > On 1/8/2015 3:02 PM, Brian wrote: > > > > If you have resorted to using iptables you have lost it. A standard > > Debian install doesn't need it. > > I disagree. iptables is a great tool for blocking unwanted connections. > > What do

Re: help in purging old packages

2015-01-09 Thread Hans
> If you want to purge all packages which have been uninstalled but for > which configuration remains: aptitude purge ?config-files > > If you want to purge all packages which are installed but which no > longer have a candidate in debian: aptitude purge ?obsolete > > If you want to purge all pa

Re: Have I been hacked?

2015-01-09 Thread Jerry Stuckle
On 1/9/2015 11:19 AM, Eduardo M KALINOWSKI wrote: > On Sex, 09 Jan 2015, Jerry Stuckle wrote: >> SSH passwords are very safe, if they are long enough. For instance, if >> you have a 10 character password, mixed case and numbers (no special >> characters), a brute force attack of 100 attempts per s

Re: help in purging old packages

2015-01-09 Thread Darac Marjal
On Fri, Jan 09, 2015 at 11:23:17AM -0500, Comer Duncan wrote: >Hi, > >I have a situation in which I am running wheezy 7.7 and for various >reasons now want to purge all packages which for some reason are still >present from etch, lenny, and squeeze.  What I would like to know is ho

help in purging old packages

2015-01-09 Thread Comer Duncan
Hi, I have a situation in which I am running wheezy 7.7 and for various reasons now want to purge all packages which for some reason are still present from etch, lenny, and squeeze. What I would like to know is how can I purge all such packages using dpkg? I can not seem to find how to select ju

Re: Have I been hacked?

2015-01-09 Thread Eduardo M KALINOWSKI
On Sex, 09 Jan 2015, Jerry Stuckle wrote: SSH passwords are very safe, if they are long enough. For instance, if you have a 10 character password, mixed case and numbers (no special characters), a brute force attack of 100 attempts per second would take almost 266 million years to cover all poss

Re: Have I been hacked?

2015-01-09 Thread Jerry Stuckle
On 1/9/2015 11:29 AM, Danny wrote: >> If you want to inspect further, I would suggest you look at each of the >> jobs being run. See if they are what you expect them to be. Also check >> your /etc/crontab and /etc/anacrontab to see what is in them. > > I would love to investigate further but I a

Re: Have I been hacked?

2015-01-09 Thread Jerry Stuckle
On 1/9/2015 4:25 AM, Martin Steigerwald wrote: > Am Freitag, 9. Januar 2015, 00:24:06 schrieb Brian: >> On Thu 08 Jan 2015 at 22:36:46 +0100, Martin Steigerwald wrote: >>> Am Donnerstag, 8. Januar 2015, 14:20:27 schrieb Jerry Stuckle: Just ensure you're using good security practices - don't al

Re: Have I been hacked?

2015-01-09 Thread Jerry Stuckle
On 1/8/2015 3:02 PM, Brian wrote: > > If you have resorted to using iptables you have lost it. A standard > Debian install doesn't need it. > > I disagree. iptables is a great tool for blocking unwanted connections. What do you have against it? Jerry -- To UNSUBSCRIBE, email to debian-use

Re: Are these Jessie installer images hybrid images?

2015-01-09 Thread Steve McIntyre
Lisi wrote: >On Friday 09 January 2015 14:19:52 Steve McIntyre wrote: >> In article <201501091406.08420.lisi.re...@gmail.com> you write: >> >Are these Jessie installer images hybrid images? It appears not, but I >> >thought all Debian installer images were now. >> > >> >https://www.debian.org/deve

Re: Are these Jessie installer images hybrid images?

2015-01-09 Thread Lisi Reisz
On Friday 09 January 2015 14:19:52 Steve McIntyre wrote: > In article <201501091406.08420.lisi.re...@gmail.com> you write: > >Are these Jessie installer images hybrid images? It appears not, but I > >thought all Debian installer images were now. > > > >https://www.debian.org/devel/debian-installer

RE: Unable to join the Debian User Forum; appears that all IPs are being black-listed.

2015-01-09 Thread Wayne Hartell
> Sorry, Wayne. I have done it yet again. Clicked "reply" in the Debian list. > I should have pressed "l" and replied to the list, not you personally. > :-( > Lisi > > Hi, Wayne, > > Welcome to Debian! Good choice! And also welcome to the list. Thank you. So far I am liking what I see.

Re: Have I been hacked?

2015-01-09 Thread Danny
> > You have completely failed to understand what fail2ban is telling you. > > > Anyway, I have decided to get new hardware and do a clean install of > > everything > > ... as many of you have suggested ... > > It was heading that way so it is probably best for you. > You sound like a heartles

Re: Have I been hacked?

2015-01-09 Thread Danny
*me* < blushing > > Why? > > If you don't know anyone in China, don't pick up the phone. Why are > your services responding to them? > > You're not seriously telling us you're accepting user name and password > for ssh authentication from the Internet, are you? > Uhm ... yes ... (looking do

Re: Have I been hacked?

2015-01-09 Thread Danny
> Blocking a country which is famous for producing chocolate and beer. > What is the world coming to? rofl :) -- To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org Archive: https://lists.debian.org/2015010

Re: Have I been hacked?

2015-01-09 Thread Danny
So Many?? > For instance here is a list of the blocks for Belgium: > http://www.nirsoft.net/countryip/be.html > > -Joris > Feel sorry for iptables ;) -- To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debi

Re: Have I been hacked?

2015-01-09 Thread Danny
> If you want to inspect further, I would suggest you look at each of the > jobs being run. See if they are what you expect them to be. Also check > your /etc/crontab and /etc/anacrontab to see what is in them. I would love to investigate further but I am afraid I am not inclined towards forensi

Re: Are these Jessie installer images hybrid images?

2015-01-09 Thread Steve McIntyre
In article <201501091406.08420.lisi.re...@gmail.com> you write: >Are these Jessie installer images hybrid images? It appears not, but I >thought all Debian installer images were now. > >https://www.debian.org/devel/debian-installer/ All the bootable amd64 and i386 images are hybrid, yes. (i.e. d

Re: Unable to join the Debian User Forum; appears that all IPs are being black-listed.

2015-01-09 Thread Lisi Reisz
Sorry, Wayne. I have done it yet again. Clicked "reply" in the Debian list. I should have pressed "l" and replied to the list, not you personally. :-( Lisi Hi, Wayne, Welcome to Debian! Good choice! And also welcome to the list. On Friday 09 January 2015 06:07:52 Wayne Hartell wrote: > Th

Are these Jessie installer images hybrid images?

2015-01-09 Thread Lisi Reisz
Are these Jessie installer images hybrid images? It appears not, but I thought all Debian installer images were now. https://www.debian.org/devel/debian-installer/ Thanks, Lisi -- To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact

Re: Have I been hacked?

2015-01-09 Thread Darac Marjal
On Thu, Jan 08, 2015 at 10:53:45PM +0200, Danny wrote: > Hi guys, > > My apologies for replying a little late ... [cut] > > As you can see ... I am already DROPping some of these IP's ... I just need > something to block an ENTIRE country ... Install xtables-addons-dkms (which will build the mo

Re: Have I been hacked?

2015-01-09 Thread Frédéric Marchal
On Thursday 08 January 2015 21:53:45, Danny wrote : > Hi guys, > > So what I did was do disable all startup scripts/servers/services and then > enable only one at a time ... then I would reboot and wait and keep an eye > on "/boot" (I deleted all randomly generated files, so I could see if a > fil

Re: Have I been hacked?

2015-01-09 Thread Martin Steigerwald
Am Freitag, 9. Januar 2015, 00:24:06 schrieb Brian: > On Thu 08 Jan 2015 at 22:36:46 +0100, Martin Steigerwald wrote: > > Am Donnerstag, 8. Januar 2015, 14:20:27 schrieb Jerry Stuckle: > > > Just ensure you're using good security practices - don't allow root > > > login, use long, random passwords,