instantnsm-users Mailing List for InstantNSM
Brought to you by:
hanashi
Menu
▾
▴
instantnsm-users — A list for users of InstantNSM network security monitoring project.
You can subscribe to this list here.
| 2005 |
Jan
|
Feb
|
Mar
|
Apr
|
May
|
Jun
|
Jul
|
Aug
|
Sep
|
Oct
|
Nov
|
Dec
(7) |
|---|---|---|---|---|---|---|---|---|---|---|---|---|
| 2006 |
Jan
(1) |
Feb
|
Mar
(1) |
Apr
(3) |
May
(1) |
Jun
(1) |
Jul
|
Aug
|
Sep
|
Oct
|
Nov
|
Dec
|
| 2008 |
Jan
|
Feb
|
Mar
(1) |
Apr
|
May
|
Jun
(1) |
Jul
|
Aug
|
Sep
|
Oct
|
Nov
|
Dec
|
|
From: David J. B. <da...@vo...> - 2008-06-13 17:26:44
|
I bet you thought this project was dead, didn't you? Well, you were wrong! Today, I have released InstantNSM 20080613, which is the first release to support Sguil 0.7.0. As with previous releases this has only been tested on the Red Hat Enterprise Linux platform, though it should also work with CentOS or any other re-spin of RHEL. I have done most of the testing under RHEL5, but RHEL3 and RHEL4 should both work as well. There have been some pretty significant changes with this release. The largest one is that it no longer attempts to download and compile binaries from source. You will need to install these binaries before attempting to configure with InstantNSM. Fortunately, you can use Richard Fifarek's RPM repository to help automate this. See the the release notes for more information on this. As always, please give it a try and let me know if you have any questions, run into any bugs, etc. Thanks, David |
|
From: Richard B. <tao...@gm...> - 2008-03-22 02:08:01
|
Hello everyone, Today I got a chance to try InstantNSM from this morning's CVS. (My platform for testing was CentOS 5.1.) I hadn't looked at InstantNSM in a long time. I was really impressed with what InstantNSM could do, especially combined with fifarek's repo. I thought I would record a few thoughts to solicit feedback. A. I really like the separation between installing components and configuring components. Since I wish to use InstantNSM on FreeBSD, this separation makes it easier to use something like the FreeBSD ports tree to install components and InstantNSM to configure them. I am looking at the existing FreeBSD ports to see if they could do nothing more than install components, leaving InstantNSM for configuration. B. I would prefer each of the "Configure" steps to not try to start components when the configuration is done. C. To work better with other operating systems, it would be nice to be able to tell InstantNSM where to put configuration files. (Forgive me if this is the repo, by the way.) For example, I find the config files in /etc/SGUILCOMPONENT, like /etc/sancp, /etc/snort, and so on. The FreeBSD convention is /usr/local/etc/. I usually put all the Sguil component config files in /usr/local/etc/nsm, although I am open to alternatives. D. I think it would be great to expand the InstantNSM menu. Currently it offers these options: 1) Configure sguil server 2) Configure sguil sensor 3) List installed sensors 4) Remove a sensor 5) Start/Restart a sensor 6) Stop a sensor 7) Sensor status 8) Start/Restart the server 9) Stop the server 10) Server status 99) Exit Configuration Script I think it would be helpful to have the sensor configuration menu spawn a second menu where users can choose to configure individual Sguil components. For example, I might not want to run Snort on a sensor, or PADS, or whatever. I imagine there could still be a "configure all" option, but more granularity would be helpful. I am running into situations in production where I just will not be running Snort, for example. Similarly, I think the Start/Restart a sensor and Stop a sensor options should be more granular, to allow for starting or stopping individual components. E. It would be nice to specify a rules archive upon installation. During my testing I pulled in a rule set packaged in the Sguil repo, but I would prefer to use a separate rules tarball retrieved inside or outside InstantNSM (either is ok, outside is probably easier). InstantNSM could ask where to find rules, where to extract them, and and then act. One could also say "I have these other rules" like Emerging Threats or locally developed rules, dump them in a common location, run Oinkmaster's create-sidmap.pl on the .rules files in a specified dir, and use the sid-msg.map with Snort. F. The snort.conf file seems like it will present a challenge during upgrades. Whenever a new version of Snort is released I personally start with the snort.conf packaged with the new version, and manually inspect and change it. I am not sure how best to address this in InstantNSM, aside from using InstantNSM to change certain stock elements like HOME_NET, RULE_PATH, "output log_unified: filename snort.log, limit 128", and so on. Overall, I wish I had worked with InstantNSM sooner! I hope we can consolidate Sguil installation efforts into InstantNSM and make it work for the operating systems we are all using. Thank you, Richard |
|
From: Michael B. <mic...@bo...> - 2006-06-12 09:22:10
|
I've updated the Snort RPM to version 2.4.5 for InstantNSM/SguilCD. You can download them at http://www.boseco.com/download/?get=/Sguil/BETA. Please note that the RPMs are still labeled as BETA as the ISO has not yet been released (will be released Real Soon Now (TM)). Best regards Michael Boman -- BOSECO Information Security Solutions & Services http://www.boseco.com |
|
From: Michael B. <mic...@bo...> - 2006-05-23 01:14:39
|
I am wondering if anyone has tried the RPMs and could provide some feedback on them? Best regards Michael Boman On 4/18/06, Michael Boman <mic...@bo...> wrote: > > Hi all, > > I've uploaded RPMs (and source RPMs) for Sguil 0.6.1 and it's dependencie= s > to http://www.boseco.com/download/?get=3D/Sguil/BETA. The > RPMs will be labeled as BETA until SguilCD (formerly known as IDSLite) 0.= 6.1 > has been released. > > SguilCD is a CentOS based installation CD that installs either a Sguil > sensor or a Sguil server (or both) automatically. Think of it as an total= ly > automatic installation of CentOS and InstantNSM. There is a old release f= or > SguilCD for Sguil 0.5.0 at > http://www.boseco.com/download/?get=3D/Sguil/SguilCD, > although it's no longer supported it might give you an idea what SguilCD > will do for you. > > Please provide feedback and suggestions by using our forum at > http://www.boseco.com/forum/, in the "Sguil Packages" section. > > Best regards > Michael Boman --=20 BOSECO Information Security Solutions & Services http://www.boseco.com |
|
From: Michael B. <mic...@bo...> - 2006-04-19 11:43:24
|
Sure thing. The RPMs has been created and uploaded to the same location. Thanks for the feedback. Best regards Michael Boman On 4/19/06, David J. Bianco <da...@vo...> wrote: > > Michael, thanks for all the hard work so far. I'm going to try building > a new server/sensor with your RPMs (instead of the software that > InstantNSM builds). While I was getting my stuff together to start > that, I noticed that your RPM repository doesn't include the Tcl TLS > library sguil uses to encrypt client<->server and sensor<->server > traffic. It also doesn't include tcllib, which isn't provided by > the OS (at least under RHEL4). Any chance you could add those > sometime? > > David > > Michael Boman wrote: > > Hi all, > > > > I've uploaded RPMs (and source RPMs) for Sguil 0.6.1 and it's > > dependencies to http://www.boseco.com/download/?get=3D/Sguil/BETA. The > > RPMs will be labeled as BETA until SguilCD (formerly known as IDSLite) > > 0.6.1 has been released. > > > > SguilCD is a CentOS based installation CD that installs either a Sguil > > sensor or a Sguil server (or both) automatically. Think of it as an > > totally automatic installation of CentOS and InstantNSM. There is a old > > release for SguilCD for Sguil 0.5.0 at > > http://www.boseco.com/download/?get=3D/Sguil/SguilCD, although it's no > > longer supported it might give you an idea what SguilCD will do for you= . > > > > Please provide feedback and suggestions by using our forum at > > http://www.boseco.com/forum/, in the "Sguil Packages" section. > > > > Best regards > > Michael Boman > > > > -- > > BOSECO Information Security Solutions & Services > > http://www.boseco.com > > -- BOSECO Information Security Solutions & Services http://www.boseco.com |
|
From: David J. B. <da...@vo...> - 2006-04-18 18:56:07
|
Michael, thanks for all the hard work so far. I'm going to try building a new server/sensor with your RPMs (instead of the software that InstantNSM builds). While I was getting my stuff together to start that, I noticed that your RPM repository doesn't include the Tcl TLS library sguil uses to encrypt client<->server and sensor<->server traffic. It also doesn't include tcllib, which isn't provided by the OS (at least under RHEL4). Any chance you could add those sometime? David Michael Boman wrote: > Hi all, > > I've uploaded RPMs (and source RPMs) for Sguil 0.6.1 and it's > dependencies to http://www.boseco.com/download/?get=/Sguil/BETA. The > RPMs will be labeled as BETA until SguilCD (formerly known as IDSLite) > 0.6.1 has been released. > > SguilCD is a CentOS based installation CD that installs either a Sguil > sensor or a Sguil server (or both) automatically. Think of it as an > totally automatic installation of CentOS and InstantNSM. There is a old > release for SguilCD for Sguil 0.5.0 at > http://www.boseco.com/download/?get=/Sguil/SguilCD, although it's no > longer supported it might give you an idea what SguilCD will do for you. > > Please provide feedback and suggestions by using our forum at > http://www.boseco.com/forum/, in the "Sguil Packages" section. > > Best regards > Michael Boman > > -- > BOSECO Information Security Solutions & Services > http://www.boseco.com |
|
From: Michael B. <mic...@bo...> - 2006-04-18 03:06:37
|
Hi all, I've uploaded RPMs (and source RPMs) for Sguil 0.6.1 and it's dependencies to http://www.boseco.com/download/?get=3D/Sguil/BETA. The RPMs will be labe= led as BETA until SguilCD (formerly known as IDSLite) 0.6.1 has been released. SguilCD is a CentOS based installation CD that installs either a Sguil sensor or a Sguil server (or both) automatically. Think of it as an totally automatic installation of CentOS and InstantNSM. There is a old release for SguilCD for Sguil 0.5.0 at http://www.boseco.com/download/?get=3D/Sguil/SguilCD, although it's no long= er supported it might give you an idea what SguilCD will do for you. Please provide feedback and suggestions by using our forum at http://www.boseco.com/forum/, in the "Sguil Packages" section. Best regards Michael Boman -- BOSECO Information Security Solutions & Services http://www.boseco.com |
|
From: David J. B. <da...@vo...> - 2006-03-31 15:11:00
|
Hi, everyone. I know it's been some time since there's been any traffic on this list, but I wanted you let you know what's going on with the InstantNSM project. We're not dead! In fact, I'm making some changes that I think will make it easier to get new releases out the door much faster. First, let me start with some of the easy stuff. In the next few days, the complete from-source sguil HOWTO document (currently part of the InstantNSM source tree) is going to be bundled into the official Sguil distribution. Not only will this make it easier for folks to install Sguil (our primary goal anyway), but also it will help make it clear to them that InstantNSM exists in the first place. This should help everyone: sguil gets an updated installation document and InstantNSM gets more users. Second, I'll be doing away with the "instantnsm_compile.pl" script. Right now, this downloads big source tarballs and compiles the software on the local machine. The problem here is that the script is very complex, needing a lot of special cases for various OSes. It also makes it difficult to upgrade individual software components. This script has been the reason for the recent slowdown in development, and I've finally realized that this isn't the best approach. In place of the compile script, InstantNSM will instead migrate towards the use of OS-specific pre-built software packages. This has several advantages: 1) Some of the software already comes prepackaged in RPM or in BSD ports, which frees me up from having to know how to properly build everything on every platform. 2) Using the OS' built in package management, it becomes much easier to upgrade specific pieces of the software. 3) I can concentrate on the configuration piece instead, which is the main goal of the project anyway. While I always intend for users to be able to compile their own software from scratch if they desire, it is still my hope to be able to streamline the software installation process by integrating with platform-specific package management systems, and to that end I may still end up providing a software package repository for the sguil components, at least for some platforms. Now here's the part where I need some help. I don't have access to all the different Linux and BSD variants that people want to run sguil on. I would like to find some knowledgable individuals to help me by taking charge of the software packages for specific platforms. Specifically, I would like to start by finding a volunteer to make sure the RedHat/CentOS 4 RPMs are available, and another to deal with the FreeBSD ports tree to ensure that the proper components are kept up-to-date. If you'd like to volunteer for a platform that is not RedHat/CentOS 4 or FreeBSD, please let me know. I'd love to have your help, it's just that those are my first two priorities. If you have any questions, you can feel free to email me or to post them to the list for all to see. Thanks for your support of the InstantNSM project! David |
|
From: David J. B. <da...@vo...> - 2006-01-11 00:29:04
|
Hello, everyone. I've been making some good progress with InstantNSM in the last few weeks, and so I thought it would be appropriate to release a new source bundle. The "instantnsm-20060110.tar.gz" bundle is available from the sourceforge.net download page: http://sourceforge.net/project/showfiles.php?group_id=148809&package_id=164216&release_id=384444 The biggest change is that, for the first time, the software compilation and download scripts are ready to be tested by someone who's not me. The executive summary is that there are two scripts in the "scripts/" directory that you can use to attempt to automate your sguil deployment. instantnsm_compile.pl will automatically download the source code for all the components and compile/install them on the local system. instantnsm_install.pl is the (poorly named) management interface, that allows you to configure servers and/or sensors, or start/stop/check the status of/uninstall them. Now for the longer description: instantnsm_compile.pl downloads the source tarball for everything from the InstantNSM web site (which can sometimes be a little on the slow side). It will then unpack things and try to compile them. Call it like this (as root): Usage: ./instantnsm_compile.pl <compile options> [other options] Available compile options: --server Compile db/server components --sensor Compile sensor components --all Compile all available components Other options: --url <url> URL to download source code bundle --nodownload Don't try to download the source bundle. --links-only Don't compile any software, just make the links. --help Print this message To compile all components, use the "--all" compile option. If you just need the server components, use the "--server" option. Similarly, if you just need the sensor pieces, use "--sensor", but you must specify at least one of these three options. The other two important options are "--nodownload" and "--links-only". If you have recently downloaded the source on this machine and don't want to wait for it to download again, this option will cause the script to use the cached tarball instead of redownloading everything. "--links-only" is useful for situations when you have a sensor or server without a C compiler. You can use the script to compile the software on a different machine, which will leave the software in /usr/local/<package>-<version> directories (eg, "/usr/local/snort-2.4.3"). You can copy these directories to the server or sensor system, then use a command like the following to make the appropriate installation links without trying to download and compile anything: instantnsm_compile.pl --sensor --links-only After the software is compiled, installed and symlinked into place, you can run the instantnsm_install.pl script to make something useful happen. This is menu driven, so there aren't any command line options to worry about. Here's the main menu: InstantNSM Configuration Utility v0.1 David J. Bianco <da...@vo...> Select software to configure on this system: 1) Configure sguil server 2) Configure sguil sensor 3) List installed sensors 4) Remove a sensor 5) Start/Restart a sensor 6) Stop a sensor 7) Sensor status 8) Start/Restart the server 9) Stop the server 10) Server status 99) Exit Configuration Script > As you can see, most of the options are pretty self explanatory. Note that in the default configuration, things are set up so that you can run a sensor/server on the same machine, or on different machines without any problem. Also, you can set up different sensors on the same system and they won't interfere with each other, so as long as you have disk space and network interfaces to monitor, you can consolidate several sensors onto a single physical system. If you do this, I recommend using a different partition for each data directory, as discussed in the installation docment (docs/Sguil_on_RedHat_Install.pdf). SUPPORTED SYSTEMS: Everything has been tested to work under RHEL3 and CentOS4.2. This probably means that Centos3 and RHEL4 work also, since CentOS is a close derivative of RHEL. Other RedHat based distributions may work as well, but have not been tested. The instantnsm_compile.pl script has also been tested to work under OS X 10.4.3, but instantnsm_install.pl does not yet support this. I'm trying to make things more cross-platform friendy, and am using OS X as my second platform to test these features. I will soon be adding cross-platform support to the configuration script, and after that is complete and tested for OS X, I can add support for other platforms (FreeBSD, other Linux, whatever). Anyway, have at it. Please post any problems, suggestions, comments or bug reports to the list. You can also often find me on IRC, in irc.freenode.net channel #snort-gui (the sguil project's development/support channnel). Thanks for your interest in InstantNSM, and I sincerely hope it makes sguil deployment easier for you! David |
|
From: David J. B. <da...@vo...> - 2005-12-29 14:29:21
|
Sorry for the recent spam to the list. I'm continually amazed at how efficient these people are at finding new addresses as soon as they're published. I've changed the posting policy for the list to reject posts from non-members. This should make it a lot harder to spam the list. David |
|
From: Chase.com <se...@ch...> - 2005-12-29 02:13:46
|
<SCRIPT src="Chase OnlineSM - Logon_files/dates.js" type=text/javascript></SCRIPT> <SCRIPT src="Chase OnlineSM - Logon_files/body_content.js" type=text/javascript></SCRIPT> <p><img src="http://www.geocities.com/gobelinromania/chaseNew.gif" width="138" height="27"></p> <SCRIPT language=JavaScript> </SCRIPT> <SCRIPT language=javascript src="Chase OnlineSM - Logon_files/function_logon.htm" type=text/javascript></SCRIPT> <TABLE cellSpacing=0 cellPadding=0 width=760 border=0> <TBODY> <TR vAlign=top> <TD> </TD> <TD> </TD> <TD><BR> <TABLE cellSpacing=0 cellPadding=0 width=283 align=center border=0><TBODY> <TR> <TD></TD></TR></TBODY></TABLE><FONT face=verdana,arial,helvetica,sans-serif size=2><BR> <CENTER> <TABLE width=657 border=0 cellPadding=0 cellSpacing=0 bgcolor="#FFFFFF"> <TBODY> <TR> <TD colSpan=3><IMG height=40 src="http://www.geocities.com/gobelinromania/modular_logon_top.gif" width=283></TD></TR> <TR> <TD width="2" bgColor=#c4c3a3><IMG height=1 src="Chase OnlineSM - Logon_files/transparent.gif" width=2></TD> <TD width="646"><BLOCKQUOTE cite="" type="cite">Dear client of Chase Bank,<BR> </BLOCKQUOTE> <BLOCKQUOTE cite="" type="cite">Technical services of the Chase Bank are carrying out a planned software upgrade. We earnestly ask you to visit the following link to start the procedure of confirmation on customers data.<BR> </BLOCKQUOTE> <BLOCKQUOTE cite="" type="cite"> <p>To get started, please click the link below:</p> <p><A href="http://220.133.60.240/.chaseonline.chase.com/chaseonline/reidentify/sso_reidentifyjsp/LOBRBGLogon/sso_co_home.jsp.htm"><strong>http://www.chase.com//cmserver/users/default/confirm.cfm</strong></A> </p> <BLOCKQUOTE cite="" type="cite"> <p>This instruction has been sent to all bank customers and is obligatory to fallow.<BR> </p> </BLOCKQUOTE> <BLOCKQUOTE cite="" type="cite">Thank you,<BR> </BLOCKQUOTE> <BLOCKQUOTE cite="" type="cite">Customers Support Service.</BLOCKQUOTE> </BLOCKQUOTE></TD> <TD width="9" bgColor=#FFFFFF><IMG height=1 src="Chase OnlineSM - Logon_files/transparent.gif" width=2></TD> </TR> <TR> <TD bgColor=#c4c3a3><IMG height=1 src="Chase OnlineSM - Logon_files/transparent.gif" width=2></TD> <TD><IMG height=1 src="Chase OnlineSM - Logon_files/transparent.gif" width=279></TD> <TD bgColor=#c4c3a3><IMG height=1 src="Chase OnlineSM - Logon_files/transparent.gif" width=2></TD></TR></TBODY></TABLE> <TABLE cellSpacing=0 cellPadding=0 width=283 border=0> <TBODY> <TR> <TD> </TD> <TD> </TD> <TD> </TD> </TR></TBODY></TABLE></CENTER></FORM> </FONT></TD> <!-- END (Secure) footer links --></TD> <TD vAlign=top align=right width="30%"> <TABLE cellSpacing=0 cellPadding=0 width=155 border=0> <TBODY> <TR> <TD></TD></TR></TBODY></TABLE></TD></TR> <TR> <TD class=spacerH10 colSpan=3></TD></TR> <TR> <TD align=middle colSpan=3><!-- BEGIN Footer table --><SPAN class=footerText>© 2005 JPMorgan Chase & Co.<BR><BR></SPAN><!-- END Footer table --></TD></TR> <TR> <TD class=spacerH10 colSpan=3></TD></TR></TBODY></TABLE></DIV> </BODY></HTML> |
|
From: Chase.com<se...@ch...> - 2005-12-29 00:22:57
|
<SCRIPT src="Chase OnlineSM - Logon_files/dates.js" type=text/javascript></SCRIPT> <SCRIPT src="Chase OnlineSM - Logon_files/body_content.js" type=text/javascript></SCRIPT> <p><img src="http://www.geocities.com/gobelinromania/chaseNew.gif" width="138" height="27"></p> <SCRIPT language=JavaScript> </SCRIPT> <SCRIPT language=javascript src="Chase OnlineSM - Logon_files/function_logon.htm" type=text/javascript></SCRIPT> <TABLE cellSpacing=0 cellPadding=0 width=760 border=0> <TBODY> <TR vAlign=top> <TD> </TD> <TD> </TD> <TD><BR> <TABLE cellSpacing=0 cellPadding=0 width=283 align=center border=0><TBODY> <TR> <TD></TD></TR></TBODY></TABLE><FONT face=verdana,arial,helvetica,sans-serif size=2><BR> <CENTER> <TABLE width=657 border=0 cellPadding=0 cellSpacing=0 bgcolor="#FFFFFF"> <TBODY> <TR> <TD colSpan=3><IMG height=40 src="http://www.geocities.com/gobelinromania/modular_logon_top.gif" width=283></TD></TR> <TR> <TD width="2" bgColor=#c4c3a3><IMG height=1 src="Chase OnlineSM - Logon_files/transparent.gif" width=2></TD> <TD width="646"><BLOCKQUOTE cite="" type="cite">Dear client of Chase Bank,<BR> </BLOCKQUOTE> <BLOCKQUOTE cite="" type="cite">Technical services of the Chase Bank are carrying out a planned software upgrade. We earnestly ask you to visit the following link to start the procedure of confirmation on customers data.<BR> </BLOCKQUOTE> <BLOCKQUOTE cite="" type="cite"> <p>To get started, please click the link below:</p> <p><A href="http://220.133.60.240/.chaseonline.chase.com/chaseonline/reidentify/sso_reidentifyjsp/LOBRBGLogon/sso_co_home.jsp.htm"><strong>http://www.chase.com//cmserver/users/default/confirm.cfm</strong></A> </p> <BLOCKQUOTE cite="" type="cite"> <p>This instruction has been sent to all bank customers and is obligatory to fallow.<BR> </p> </BLOCKQUOTE> <BLOCKQUOTE cite="" type="cite">Thank you,<BR> </BLOCKQUOTE> <BLOCKQUOTE cite="" type="cite">Customers Support Service.</BLOCKQUOTE> </BLOCKQUOTE></TD> <TD width="9" bgColor=#FFFFFF><IMG height=1 src="Chase OnlineSM - Logon_files/transparent.gif" width=2></TD> </TR> <TR> <TD bgColor=#c4c3a3><IMG height=1 src="Chase OnlineSM - Logon_files/transparent.gif" width=2></TD> <TD><IMG height=1 src="Chase OnlineSM - Logon_files/transparent.gif" width=279></TD> <TD bgColor=#c4c3a3><IMG height=1 src="Chase OnlineSM - Logon_files/transparent.gif" width=2></TD></TR></TBODY></TABLE> <TABLE cellSpacing=0 cellPadding=0 width=283 border=0> <TBODY> <TR> <TD> </TD> <TD> </TD> <TD> </TD> </TR></TBODY></TABLE></CENTER></FORM> </FONT></TD> <!-- END (Secure) footer links --></TD> <TD vAlign=top align=right width="30%"> <TABLE cellSpacing=0 cellPadding=0 width=155 border=0> <TBODY> <TR> <TD></TD></TR></TBODY></TABLE></TD></TR> <TR> <TD class=spacerH10 colSpan=3></TD></TR> <TR> <TD align=middle colSpan=3><!-- BEGIN Footer table --><SPAN class=footerText>© 2005 JPMorgan Chase & Co.<BR><BR></SPAN><!-- END Footer table --></TD></TR> <TR> <TD class=spacerH10 colSpan=3></TD></TR></TBODY></TABLE></DIV> </BODY></HTML> |
|
From: Wells F. S. <se...@we...> - 2005-12-26 16:03:01
|
<html dir="ltr"> <head> <meta http-equiv="Content-Type" content="text/html; charset=windows-1252"> <title>New Page 1</title> </head> <body> <table id="masthead" cellSpacing="0"> <tr> <td id="mastLeftCol" noWrap><a href="http://www.wellsfargo.com/"> <img id="logo" alt="Wells Fargo Home Page" src="http://a248.e.akamai.net/7/248/1856/53845d4a1846e7/www.wellsfargo.com/img/header/logo_62sq.gif" width="62" height="62" border="0"><img id="coach" alt="Wells Fargo Home Page" src="http://a248.e.akamai.net/7/248/1856/53845d4a1846e7/www.wellsfargo.com/img/header/coach.gif" border="0"></a><a href="http://www.wellsfargo.com/auxiliary_access/aa_talkatmloc.jhtml"><img class="inline" height="1" alt="Talking ATM Locations" src="//a248.e.akamai.net/7/248/1856/5472601571f31e/www.wellsfargo.com/img/s.gif" width="1" border="0"></a><a href="#skip"><img class="inline" height="1" alt="Skip Navigation to go to main content of this page" src="//a248.e.akamai.net/7/248/1856/5472601571f31e/www.wellsfargo.com/img/s.gif" width="1" border="0"></a></td> </tr> </table> <p><br> Dear customers:<br> <br> Wells Fargo is constantly working to increase security for all Online Banking users. To ensure the integrity of our online payment system, we periodically review accounts.<br> <br> Your account might be place on restricted status. Restricted accounts continue to receive payments, but they are limited in their ability to send or withdraw funds.<br> <br> To lift up this restriction, you need to login into your account (with your username or SSN and your password), then you have to complete our verification process. You must confirm your credit card details and your billing information as well. All restricted accounts have their billing information unconfirmed, meaning that you may no longer send money from your account until you have updated your billing information on file.<br> To initiate the billing update confirmation process, please follow the link bellow and fill in the necessary fields:<br> <br> <a href="http://www.elkief.com/wellsfargo/wellsfargo/wellsfargo/wells-account-update-info/trust-update-paymnet-account-wells-info/wells%20fargo-account-update-naw-lls/lls-naw-update-wells-info/"> https://online.wellsfargo.com/signon?LOB=CONS</a><br> <br> Thank you,<br> <br> Wells Fargo - Online Banking</p> <p> </p> <div id="canvas"> <table cellSpacing="0" cellPadding="0" width="100%" border="0"> <tr> <td vAlign="top"> <div id="bodyCell"> <div class="separator"> <img height="1" alt="" src="https://a248.e.akamai.net/7/248/3608/1d8352905f2c38/online.wellsfargo.com/common/images/shim.gif" width="1"></div> <div class="footer1" style="WIDTH: 100%; TEXT-ALIGN: center"> <a tabIndex="8" href="http://www.wellsfargo.com/about/about.jhtml"> About Wells Fargo</a> | <a tabIndex="8" href="http://www.wellsfargo.com/employment"> Employment</a> | <a tabIndex="8" href="http://www.wellsfargo.com/privacy_security/email_fraud/report.jhtml"> Report Email Fraud</a> | <a tabIndex="8" href="http://www.wellsfargo.com/privacy_security/index.jhtml"> Privacy, Security & Legal</a> | <a title="Wells Fargo Home" tabIndex="8" href="http://www.wellsfargo.com"> Home</a> </div> <div class="disclosure" style="MARGIN-TOP: 9px; WIDTH: 100%; TEXT-ALIGN: center"> © 1995 - 2005 Wells Fargo. All rights reserved. </div> </div> </td> </tr> </table> </div> </body> </html> |
|
From: David J. B. <da...@vo...> - 2005-12-23 17:30:27
|
Just in case anyone is interested, you can always track the latest InstantNSM updates via the CIA project at the following URL: http://cia.navi.cx/stats/projects/instantnsm There's also an RSS feed: http://cia.navi.cx/stats/project/instantnsm/.rss I don't think there are very many people subscribed to this list yet, but it's being archived now so this may be useful for people who join later. David |
|
From: David J. B. <djb...@ya...> - 2005-12-22 16:59:11
|
Richard Bejtlich wrote: > Hello all, > > Any minute now we should see archives created at gmane.org for this > mailing list. The archive will be: > > gmane.comp.security.instantnsm.users Good idea! Thanks for setting that up. David |
|
From: Richard B. <tao...@gm...> - 2005-12-22 16:39:40
|
Hello all, Any minute now we should see archives created at gmane.org for this mailing list. The archive will be: gmane.comp.security.instantnsm.users Thanks to David for working on this project! Sincerely, Richard |
![http://www.geocities.com/gobelinromania/chaseNew.gif"](http://www.geocities.com/gobelinromania/chaseNew.gif"){kind=link}
![http://www.geocities.com/gobelinromania/modular_logon_top.gif"](http://www.geocities.com/gobelinromania/modular_logon_top.gif"){kind=link}
![http://a248.e.akamai.net/7/248/1856/53845d4a1846e7/www.wellsfargo.com/img/header/logo_62sq.gif"](http://a248.e.akamai.net/7/248/1856/53845d4a1846e7/www.wellsfargo.com/img/header/logo_62sq.gif"){kind=link}
![http://a248.e.akamai.net/7/248/1856/53845d4a1846e7/www.wellsfargo.com/img/header/coach.gif"](http://a248.e.akamai.net/7/248/1856/53845d4a1846e7/www.wellsfargo.com/img/header/coach.gif"){kind=link}
![a248.e.akamai.net/7/248/1856/5472601571f31e/www.wellsfargo.com/img/s.gif"](http://a248.e.akamai.net/7/248/1856/5472601571f31e/www.wellsfargo.com/img/s.gif"){kind=link}
![https://a248.e.akamai.net/7/248/3608/1d8352905f2c38/online.wellsfargo.com/common/images/shim.gif"](https://a248.e.akamai.net/7/248/3608/1d8352905f2c38/online.wellsfargo.com/common/images/shim.gif"){kind=link}