Re: Tripwire can't send report by email??????

2011-04-26 Thread Freeman
On Mon, Apr 25, 2011 at 04:47:39PM +, Camaleón wrote: > On Mon, 25 Apr 2011 16:28:09 +, Cedric DC wrote: > > >>  1/ Instruct tripwire to use a real e-mail sender (whether possible) > >  I have read the "man tripwire". It's not possible to specify the > >  sender email address. > > Recheck

Re: Tripwire can't send report by email??

2011-04-25 Thread Freeman
On Sun, Apr 24, 2011 at 07:28:42AM +, Cedric DC wrote: > > Hello, > > I repost my question because I don't have posted it in the right way. I'm > sorry, it's my first post in the Debian mailing list. > > I have setup tripwire on a Debian 6. I have tripwire integrity reports (pwr > files) i

RE: Tripwire can't send report by email‏‏ [OT but not really]

2011-04-25 Thread Cedric DC
I have change a settings in my hotmail email. I hope that's OK now. > Date: Mon, 25 Apr 2011 08:40:39 -0600 > From: pecon...@mesanetworks.net > To: debian-user@lists.debian.org > Subject: Re: Tripwire can't send report by emai

Re: Tripwire can't send report by email‏‏

2011-04-25 Thread Camaleón
On Mon, 25 Apr 2011 16:28:09 +, Cedric DC wrote: >>  1/ Instruct tripwire to use a real e-mail sender (whether possible) >  I have read the "man tripwire". It's not possible to specify the >  sender email address. Recheck "man 8 tripwire" (test mode), it seems you can configure some e- mailin

RE: Tripwire can't send report by email‏‏

2011-04-25 Thread Cedric DC
ail address @proxy by @mydomain.com > I had in the file /etc/exim4.conf.template this one and restart exim4  # TEST  *@*proxytest* $1...@mydomain.com  And it's doesn't work  Regards  Cédric > To: debian-user@lists.debian.org > From: noela...

Re: Tripwire can't send report by email‏‏ [OT but not really]

2011-04-25 Thread Paul E Condon
Cedric, I don't have much to offer on your problem with tripwire, but your emails to debian-user are being caught by a spam filter that I have recently installed that is claimed by its author to filter out 'unreadable' spam. This may be happening to other subscribers ot debian-user. If one of them

Re: Tripwire can't send report by email‏‏

2011-04-24 Thread Freeman
On Sun, Apr 24, 2011 at 07:45:37AM +, Cedric DC wrote: > > I don't find how to change this "" by a FQDN the > > If I try to launch hostname -v, I have the FQDN of my server. > root@proxytest:/etc/tripwire# hostname -f > proxytest.subdomain.mydomain.com > > Can I specify the "From address" i

Re: Tripwire can't send report by email‏‏

2011-04-24 Thread Camaleón
On Sun, 24 Apr 2011 07:28:42 +, Cedric DC wrote: > I repost my question because I don't have posted it in the right way. > I'm sorry, it's my first post in the Debian mailing list. Good, but next time avoid using html in messages ;-) (...) > ### Error Number:504 5.5.2 : Sender address rejec

RE: Tripwire can't send report by email‏‏

2011-04-24 Thread Cedric DC
I don't find how to change this "" by a FQDN the If I try to launch hostname -v, I have the FQDN of my server. root@proxytest:/etc/tripwire# hostname -f proxytest.subdomain.mydomain.com Can I specify the "From address" in twcfg.txt ? root@proxytest:/etc/tripwire# hostname -f proxytest.intra.vil

Re: Tripwire can't send report by email‏

2011-04-23 Thread Ron Johnson
On 04/23/2011 03:18 PM, Cedric DC wrote: [snip] If I try to launch this in command line I have this message : root@proxytest:/etc/cron.daily# /usr/sbin/tripwire --test --email t...@mydomain.com Sending a test message to: t...@mydomain.com ### Error: The SMTP server returned an error. ### Error

Re: Tripwire can't send report by email?

2011-04-23 Thread Freeman
On Sat, Apr 23, 2011 at 02:21:01PM -0700, evenso wrote: > It is far more appropriate to ask your question with a new thread rather > than piggy back a question onto someone else's question. > > You can ask your own question by addressing your mail to > > debian-user@lists.debian.org > > with a

Re: Tripwire can't send report by email?

2011-04-23 Thread Freeman
On Sat, Apr 23, 2011 at 08:18:50PM +, Cedric DC wrote: > > Hello, > > I have setup tripwire on a Debian 6. I have tripwire integrity reports (pwr > files) in the directory /var/lib/tripwire/report/ > With the following command I can read the report. > twprint --print-report --twrfile proxyte

Re: Tripwire vs. other file integrity checkers

2006-09-01 Thread Steve Kemp
On Fri, Sep 01, 2006 at 12:18:26PM -0300, Alejandro wrote: > Dear all, I've been use Tripwire since a lot of years on my Debian > boxes, but now I want to know if there is any file integrity checker > package better than Tripwire, that presents any visible advantage...or > is Tripwire still the bes

Re: Tripwire and /proc

2006-01-05 Thread Karsten M. Self
on Thu, Jan 05, 2006 at 11:52:06AM -0800, Todd A. Jacobs ([EMAIL PROTECTED]) wrote: > The amount of data that tripwire reports on /proc is a bit overwhelming, > and strikes me as not particularly useful most of the time. After all, > most of the info in the root of /proc is PID info, so while cert

RE: Tripwire

2004-09-23 Thread Adam Aube
David Baron wrote: > So ... I have this thing fairly stable. 14 /etc items seem to change daily > due to their chron or daemon execution. Can live with this. (Results with > alternatives such as aide should be similar--the ideal monitoring package > would track upgrades and logrotations et al and

RE: Tripwire

2004-09-23 Thread Alvin Oga
On Thu, 23 Sep 2004, David Baron wrote: > RIght now, I have /var and /proc excluded because of their volativity. I > assume there are specific items/directories in these which SHOULD be > monitored. Can anyone tell me which ones? every directory should be monitored ... no exceptions because

RE: Tripwire

2004-09-23 Thread David Baron
So ... I have this thing fairly stable. 14 /etc items seem to change daily due to their chron or daemon execution. Can live with this. (Results with alternatives such as aide should be similar--the ideal monitoring package would track upgrades and logrotations et al and not squawk at these.) R

Re: Tripwire

2004-09-17 Thread Adam Aube
David Baron wrote: > On Friday 10 September 2004 20:01, > [EMAIL PROTECTED] wrote: >> > This is a file-system integrity checker, will detect hacks, >> > intrusions, etc. I tried it but seems to find lots of stuff that >> > seem part of the dynamics of the ongoing system operation >> >> There is an

Re: Tripwire

2004-09-11 Thread David Baron
On Friday 10 September 2004 20:01, [EMAIL PROTECTED] wrote: > > This is a file-system integrity checker, will detect hacks, > > intrusions, etc. I tried it but seems to find lots of stuff that > > seem part of the dynamics of the ongoing system operation > > There is an exclusion list. I

Re: Tripwire

2004-09-10 Thread Tim Kelley
On Friday 10 September 2004 03:48, David Baron wrote: > Anyone using this on Debian? > > This is a file-system integrity checker, will detect hacks, intrusions, > etc. I tried it but seems to find lots of stuff that seem part of the > dynamics of the ongoing system operation, and attempts to change

Re: Tripwire

2004-09-10 Thread ghcbc
On Fri, Sep 10, 2004 at 11:48:31AM +0300, David Baron wrote: > Anyone using this on Debian? > > This is a file-system integrity checker, will detect hacks, intrusions, etc. I > tried it but seems to find lots of stuff that seem part of the dynamics of > the ongoing system operation, and attempt

Re: Tripwire

2004-09-10 Thread Leandro Guimaraens Faria Corsetti Dutra
Em Fri, 10 Sep 2004 11:10:09 +0200, David Baron escreveu: > This is a file-system integrity checker, will detect hacks, > intrusions, etc. I tried it but seems to find lots of stuff that > seem part of the dynamics of the ongoing system operation There is an exclusion list. -- Leandro G

Re: Tripwire error in /proc

2004-04-06 Thread Adam Aube
Anthony Campbell wrote: > I've got rid of most of the errors reported by tripwire but am left with > this: > 1. File system error. > Filename: /proc/19860/fd/3 > No such file or directory > Do I just ignore this, or what? /proc is a a virtual filesystem - nothing but user-accessible

Re: Tripwire

2003-02-22 Thread Paul Johnson
On Fri, Feb 21, 2003 at 12:45:59PM +, Jeff Elkins wrote: > I just completed moving my elkins.org server from RH7.2 to woody and > everything went pretty smoothly, except for tripwire. Apt does not show this > as an available package. Is this for license reasons? Is there a comparable > packa

Re: Tripwire

2003-02-21 Thread Jeff Elkins
Thanks for the suggestions! Jeff Elkins http://www.elkins.org -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Re: Tripwire

2003-02-21 Thread Jeff
Kirk Strauser, 2003-Feb-21 13:29 -0600: > At 2003-02-21T12:45:59Z, Jeff Elkins <[EMAIL PROTECTED]> writes: > > > Is there a comparable package available for debian? > > I've started using AIDE on my production machines. I'm using Integrit. It's working nicely on my Testing system. jc -- Jef

Re: Tripwire

2003-02-21 Thread Kirk Strauser
At 2003-02-21T12:45:59Z, Jeff Elkins <[EMAIL PROTECTED]> writes: > Is there a comparable package available for debian? I've started using AIDE on my production machines. -- Kirk Strauser In Googlis non est, ergo non est. pgp0.pgp Description: PGP signature

Re: Tripwire won't install

2002-03-23 Thread Juhan Kundla
Ühel ilusal päeval [23.03.2002] kirjutas Cam Ellison <[EMAIL PROTECTED]>: > * Juhan Kundla ([EMAIL PROTECTED]) wrote: > > Heips! > > > > I had the following error while installing tripwire on my debian woody > > box. I have never had any problems with apt-get or debian packages, so i > > am kind o

Re: Tripwire won't install

2002-03-22 Thread Cam Ellison
* Juhan Kundla ([EMAIL PROTECTED]) wrote: > Heips! > > I had the following error while installing tripwire on my debian woody > box. I have never had any problems with apt-get or debian packages, so i > am kind of lost now. Is it a bug? What should i do to debug this error? > It's bug #135414. P

Re: Tripwire won't install

2002-03-22 Thread Cam Ellison
* Juhan Kundla ([EMAIL PROTECTED]) wrote: > Heips! > > I had the following error while installing tripwire on my debian woody > box. I have never had any problems with apt-get or debian packages, so i > am kind of lost now. Is it a bug? What should i do to debug this error? > > Setting up tripwir

Re: tripwire - or others?

2001-08-27 Thread Noah Meyerhans
On Mon, Aug 27, 2001 at 05:27:04PM +0200, Martin F Krafft wrote: > i need to employ some tripwire-like tool on a couple of hosts and i > was wondering if you had any experience. i myself have used tripwire > for years, but i could see many features that other programs could > have that tripwire doe

Re: tripwire reports constant changes of /usr/doc and /home

2001-08-18 Thread MaD dUCK
also sprach Roberto Diaz (on Sat, 18 Aug 2001 07:11:26PM +0200): > > at first, it was only /home, and i thought it had anything to do with > > the quotae i enabled on that partition, but /usr/doc is (a) not a > > partition of its own, and (b) /usr doesn't have quotae. > > /home could be explained

Re: tripwire reports constant changes of /usr/doc and /home

2001-08-18 Thread Roberto Diaz
> at first, it was only /home, and i thought it had anything to do with > the quotae i enabled on that partition, but /usr/doc is (a) not a > partition of its own, and (b) /usr doesn't have quotae. /home could be explained if you have something (like netscape which let things there, or procmail wh

Re: Tripwire

2001-06-01 Thread Eugene Tyurin
Long time ago I was told that read-only floppies are not exactly safe. Early fd drives used read-only tab as a physical circuit-breaker, but nowadays everything is done through BIOS. So, theoretically, one can write onto a write-protected floppy. Is this correct? --ET. On Fri, Jun 01, 2001 a

Re: Tripwire

2001-06-01 Thread will trillich
On Fri, Jun 01, 2001 at 07:45:29PM +0530, N. Raghavendra wrote: > Hello debian-user, > > I have just installed the tripwire package. Two questions: > > 1. The directory /usr/lib/tripwire/databases was empty, so I > created a database by doing 'tripwire -initialize'. It looks like > this is a nece

Re: Tripwire

2001-06-01 Thread Dimitri Maziuk
* N. Raghavendra ([EMAIL PROTECTED]) spake thusly: > Hello debian-user, > > I have just installed the tripwire package. Two questions: > > 1. The directory /usr/lib/tripwire/databases was empty, so I > created a database by doing 'tripwire -initialize'. It looks like > this is a necessary step, b

Re: Tripwire.

2001-03-25 Thread Bill Wohler
Tim Uckun <[EMAIL PROTECTED]> writes: > >An alternative would be aide, that's available at least for sid. > > I'll have to look into that one too. I just switched to aide after running tripwire for years. There are three major advantages to aide for me: - Configuration is cleaner and allow

Re: Tripwire.

2001-03-25 Thread Tim Uckun
At 12:22 PM 3/25/2001 +0300, Tommi Komulainen wrote: On Sun, Mar 25, 2001 at 12:04:19AM -0800, Tim Uckun wrote: > Is anybody aware of a tripwire package for debian? If not is there a > similar software I can use instead. Aware? Errr, a trick question? Have you tried apt-cache search? Yes I d

Re: Tripwire.

2001-03-25 Thread Tommi Komulainen
On Sun, Mar 25, 2001 at 12:04:19AM -0800, Tim Uckun wrote: > Is anybody aware of a tripwire package for debian? If not is there a > similar software I can use instead. Aware? Errr, a trick question? Have you tried apt-cache search? Package: tripwire Section: non-US Version: 2.3.0.50-1 Descript

Re: tripwire

2001-03-06 Thread MaD dUCK
also sprach Leonard Leblanc (on Tue, 06 Mar 2001 09:34:33AM -0800): > Now I got this right after initializing it, so I don't think this has > anything to do with someone changing a file, but does anyone know what it > means?? have you tried re-initializing? or doing the -interactive approach? mayb

Re: tripwire license/debian status Was: IDS

2000-11-20 Thread Noah L. Meyerhans
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On Sun, Nov 19, 2000 at 11:22:57PM -0500, Mike wrote: > Federico Grau wrote: > > Whats the debian perspective on tripwire... > > > > I see there is a non-free package "tripwire 1.2-16.1", however the > > tripwire.org FAQ ( http://www.tripwire.org/qan

Re: tripwire license/debian status Was: IDS

2000-11-19 Thread John Hasler
Federico Grau writes: > ...the tripwire.org FAQ ( http://www.tripwire.org/qanda/faq.php quetion > 16) says that the linux version of tripwire is released under the gpl > (can they release under the gpl and restrict that license to linux?!). They say they are releasing the Linux version under the G

Re: tripwire license/debian status Was: IDS

2000-11-19 Thread Mike
Federico Grau wrote: > Whats the debian perspective on tripwire... > > I see there is a non-free package "tripwire 1.2-16.1", however the > tripwire.org FAQ ( http://www.tripwire.org/qanda/faq.php quetion 16) says that > the linux version of tripwire is released under the gpl (can they release >

Re: tripwire segfaults

1997-10-31 Thread Adriano Nagelschmidt Rodrigues
Walter L. Preuninger II writes: > I am trying to use tripwire, but when running > walterp# tripwire -init > ### Phase 1: Reading configuration file > ### Phase 2: Generating file list > Segmentation fault (core dumped) You may want to install the tripwire package from