trinux-news — Releases, packages, new features, and more!

[Trinux-news] download everything?

[tad heckaman.c. <ta...@he...>]

I have the latest trinux net version and I was wondering if it is possible
to download everything on the server and install it. My install right now
does not download anything at all right now. does anyone have a script or
config file that will download all the files?

[Trinux-news] first post, several issues with 0.80 rc2

[Joerg O. <ov...@de...>]

Hello there!

This is my first post to this list, so... I tried a lot to find if the following issues have been discussed before, sorry if I failed.
(I take hints on where I could find information besides mailing list/forum also.)

Also sorry for bringing so many unrelated items together...

I'm using Trinux 0.80 rc2, the cdrom iso, booting from cd.

The issue with not mounting the cd/not getting packages/getpkg vs. pkgadd seems to be known and in the works, so I'll skip that.

- lsmod doesn't show loaded modules after boot
- mount doesn't show mounted filesystems after boot
- documentation states, Trinux'd ask for network config if dhcp fails, but that doesn't happen it seems

- The "Basics" - Webpage at http://trinux.sourceforge.net/basics.html seems to be broken/incomplete/cut off at the end

In addition to that I'd like to know where I can get prefabricated binary keyboardmaps in the required format for loadkmap? Some posting stated those from tomsrtbt'd work, but if anyone could spare me getting tomsrtbt/making disk/booting tomsrtbt/mounting some fs/unpacking custom.tgz/testing kbdmap/you get my point... that'd be nice.

I'd take a (preferably zipped) de-latin1.map + de-latin1-nodeadkeys.map by mail also (already tried google, of course) and be in debt.


If you have any input on this, e.g. if I should file a bug for the one or other, or solutions, also partial ones (of course :), links, I'd be happy to hear from you.

jo

P.S.: There are also hints resp. X on Trinux - any links for me? a HOWTO or sth? just nosy ... not important ...
+-------------------------------------------------------------------+
|  __ __ __ __ _ _          It ain't over 'till it's Joerg Over...  |
| / _ \ V / -_) '_/                                                 |
| \___/\_/\___|_|                                                   |
+-------------------------------------------------------------------+

Re: [Trinux-news] Iptables?

[Matthew F. <mf...@ci...>]

Look in the kernel folders (2.4.5/2.4.13) for the iptables packages which
are kernel specific -- you need both iptables and netfilter

getpkg 2.4.5/netfilter
getpkg 2.4.5/iptables

-mdf

-------------------------------------
Matthew Franz        mf...@ci...
Product Security Engineer
Security Technologies Assessment Team

On Fri, 11 Jan 2002, Jan Marek wrote:

> Date: Fri, 11 Jan 2002 11:03:45 +0100
> From: Jan Marek <jm...@jc...>
> To: tri...@li...
> Subject: [Trinux-news] Iptables?
>
> Hallo,
>
> is there package, in which is iptables? I know about netfilter
> package, but in this package are modules for kernel, but not
> iptables for manipulating with rules...
>
> Thank you very much...
>
> Sincerely
> Jan Marek
> --
> Ing. Jan Marek
> University of South Bohemia
> Academic Computer Centre
> Phone: +420-38-7772080
>
> _______________________________________________
> Trinux-news mailing list
> Tri...@li...
> https://lists.sourceforge.net/lists/listinfo/trinux-news
>

[Trinux-news] Iptables?

[Jan M. <jm...@jc...>]

Hallo,

is there package, in which is iptables? I know about netfilter
package, but in this package are modules for kernel, but not
iptables for manipulating with rules...

Thank you very much...

Sincerely
Jan Marek
-- 
Ing. Jan Marek
University of South Bohemia
Academic Computer Centre
Phone: +420-38-7772080

[Trinux-news] NewBie Blues

[Intrusion D. <ide...@ya...>]

OK,

Up front people ... I apologize (or apologise) for the
dumb questions I am about to ask but I am a newbie to
Linux having just, and I do mean just, installed SUSE
and now trying my hand at Trinux. OK, so I'm trying
the switch  .........

REQUEST: 

1. Request on installation procedures
Sorry but the documentation on the website is not the
best for us REALLY newbie folks

2. With the exception of NMap, how the other programs
are run within the Trinux environment;

3. After you get up off the floor from your spat of
uncontrollable laughter, realise (or realize) that I
am truly serious. 

4. rather than post to the entire group I would
appreciate a little hand holding here from a
"sympathetic" subscriber.

In advance, I thank you.

Environment:
1. OS - Windows '98 (OK,OK, I'm also a tad bit behind
in that area!!)

2. HArdware: IBM THinkpad 600. Am willing to give mre
details, but only after receipt of individual email.

3. Used the latest version of Trinux and the IDE
image;

4. Wrote the image file to a floppy using RawWrite;

5. Created the c:/trinux directory and copied all the
files from the website to this directory (I used the
website in Texas (duh);

6. Turned system off and rebooted from floppy:

7. ON boot:
7.1 Kernel Loaded (v 2.4.5)
7.3 Created HDA1 through HDA6 (From my limited
experience these are hard disks recognized by the
Linux system and I have NO idea why there are so many.
I have but 2 partitions: 1 for Windows and 1 for SUSE
Linux);

7.3 Added packages like the bash (I do get the BASH#
prompt) and some others that were downloaded;

8. Welsome message appears with a request to activate
the console by pressing return.

OK ......so I press enter and get <BASH#> then I try
to activate the other programs (e.g. scanners,
ipaudit, and nothing but "sh: ipaudit: command not
found" then back to the prompt.


Sooooooooo, there ya go. Now can someone please help.
I have searched through the email archives and a
French guy came close to the problem I am having, but
there was no definitive answer. 

ANyways, hope I have been detailed snough.

Kind regards






__________________________________________________
Do You Yahoo!?
Send FREE video emails in Yahoo! Mail!
http://promo.yahoo.com/videomail/

[Trinux-news] Trinux Mirrors and Mirroring Trinux

[Matthew F. <mf...@ci...>]

Folks,

To clear up some of the confusion, I have wiped clean the mirrors page
(http://trinux.sf.net/mirrors.html) so that it is now up to date and
accurate.

If you are interested in being added to this list (or put back on this
list) let me know.

Here is the script the folks at wiretapped.net are using to mirror trinux
with lftp (see freshmeat for the tool)

Thanks

-mdf

----


cd /path/to/trinux/boot/
/usr/local/bin/lftp -e 'set net:max-retries 5 && set net:idle 60 && set net:timeout 60 && o http://prdownloads.sourceforge.net/trinux/ && mirror --delete --verbose && quit'
cd /path/to/trinux/kernel/
/usr/local/bin/lftp -e 'set net:max-retries 5 && set net:idle 60 && set net:timeout 60 && o http://trinux.sourceforge.net/kernel/ && mirror --delete --verbose && quit'
cd /path/to/trinux/pkg/
/usr/local/bin/lftp -e 'set net:max-retries 5 && set net:idle 60 && set net:timeout 60 && o http://trinux.sourceforge.net/pkg/ && mirror --delete --verbose && quit'
cd /path/to/trinux/util/
/usr/local/bin/lftp -e 'set net:max-retries 5 && set net:idle 60 && set net:timeout 60 && o http://trinux.sourceforge.net/util/ && mirror --delete --verbose && quit'

[Trinux-news] IMPORTANT: Status of trinux.org site

[Matthew F. <mf...@ci...>]

Folks,

If for some reason you've run across www.trinux.org, you will not find the
friendly penguin there.

This is either one of two things:

1) DNS screwup
2) Compromise of ISP/Web Hosting folks

I either case your best bet is you use the Sourceforge site until further
notice (http://trinux.sf.net) and I would *not* use
http://www.trinux.org/pkg/ (although it doesn't appear to work) for
package loading.

Thanks

= mdf

[Trinux-news] New .iso for PCMCIA

[Matthew F. <mat...@ya...>]

I've released a new 4mb .iso image for testing
(0.81pre0-24.5). The primary purpose is for laptops
since previous versions were missing the
pcmcia-bin.tgz package.

It is available at:

http://www.trinux.org/iso/

or

http://prdownloads.sf.net/trinux/ but this is very
slow and I'm not sure it got uploaded correctly

Post any problems to the list.





__________________________________________________
Do You Yahoo!?
Find a job, post your resume.
http://careers.yahoo.com

[Trinux-news] Notice (19698)

[<xx...@ew...>]

Best underground information print now !!!


1. Guaranteed Unsecured Credit Cards up to $50,000 Regardless of Bad Credit.

We can show you how and where you can obtain unsecured Gold and Platinum credit 
cards with credits limits up to $50,000 per card!  Regardless of your past credit history! 
You are guaranteed to receive at least 2 unsecured credit cards of up to $20,000 through 
our exclusive list. The secret to getting the credit you deserve is knowing how and where 
to look!

__No credit checks! No employment check!
__No credit turndowns! No credit, Bad credit! 
__Some with as low as 0% APR for the life of the card!
__Guaranteed approval! 

2. Satellite TV/RCA Dish Descrambler

Complete plans for building home satellite TV descrambler. For access to a clear 
reception of pay TV signals on home satellite dish! It does not require any additional 
equipment! Complete PC board template & instructions! This also includes a manual for 
accessing the RCA/DSS satellite dish. All the latest information for doing it right. 

3. Free Long Distance

Learn how some people make long distance calls to other countries at no cost! The 
information in these reports explains everything to call other countries for free! Country 
codes, city codes, overseas sender codes! 

4. Underground Guide to Utility Meters

The illustrated guide to gas, water & electric meters! We show you in detail methods 
many people use to stop, slow down, even reverse all three types! This underground 
manual is one of our most popular items! Complete illustrated techniques and easy to do. 
Shows how to defeat all major brands & models of gas, water & electric meters.

5. X-Ray Envelope Spray

Have you ever wanted to read the contents of an envelope without opening it? Many 
government and other organizations use what is known as X-Ray Envelope Spray to do 
this! An envelope is sprayed with this secret chemical and it becomes translucent for a 
short period of time, which allows the contents to be read without opening. Private supply 
houses sell small cans of this aerosol spray for up to $50 a can! The spray is actually a 
commonly available item found in major grocery and discount stores. No modification of 
the spray is needed, as it is ready to use as X-Ray Envelope Spray and sells for about 
$1.99 in retail stores!

6. How to Find Anyone and Obtain Unlisted Phone Numbers

Tired of getting the wrong number? Stop looking! We can help! We'll show you how to 
get the unlisted phone number of anyone. No one can hide now! Simple. Skip tracers use 
these tricks. We also include everything you need to know about finding missing people 
or loved ones from the comfort of your home. Why pay money when you can do it 
yourself? 

7. Radar Zapper 

This simply technique converts existing radar detectors into a device that will jam police 
radar. This device sends false readings back to the police radar! Works on virtually all 
detectors and easy to use!

8. Untraceable E-Mail 

How to send totally anonymous and untraceable E-mail. We're not talking about those 
generic Yahoo! Accounts -- this is the real McCoy, anonymous email. Everything 
explained. Absolutely untraceable.

9. Scan-Tron Genius

Here at last!! This very controversial report describes in detail how any student can easily 
defeat Scan-Tron test readers to pass a test even though he does not know the answer! 
This simple method will fool the scan reader into thinking you answered correctly! No 
tools needed. Completely tested. You won't believe how simple this method is!

10. Bad Credit Cleaning Manual

Simple ways to restore bad credit rating to A++. Many methods presented here - some 
legal & some "not so legal". 

11. Pass Drug Tests 

Don't use drugs! However, many innocent people are victims of drug testing. Some over 
the counter medicine can trigger false results & cost you your job. Proven methods to 
beat drug tests. We show you how to build a simple device that can fool the best! Protect 
yourself & your job, even if you don't use drugs.

12.Cable TV Decoders

How some people get cable TV and turn their converter box into "full service" mode. 
This is the latest information. Also, how to build your own "snooper stopper" for pennies. 
Prevents cable companies from spying on you.

13. Outsmart Lie Detector Tests

Hundreds of thousands of people in this country are wrongfully fired or not hired simply 
because they did not pass the lie detector test even though they've done nothing wrong! 
Read drugless methods to help pass whether you are lying or not! A valuable tool for any 
job seeker. Don't be harassed by your employer ever again. Tested and proven.

14. Lock-picks & Lock-picking.

Why buy expensive lock-picks we'll show you how to make your own professional lock-
picks. Exact detailed drawings & construction techniques! This is perhaps the easiest to 
understand course ever published. You won't believe how easy it is to make these tools! 
We also show you how a basic lock works & how they are picked. This publication is 
complete with detailed drawings & illustrations.

ORDER NOW!!!

That's 14 products, all for just $19.95. CA residents please add sales Tax 

We accept: Visa, MasterCard, American Express, Cash, Personal Checks, Money Orders 
and Cashiers Checks.

Print the following form and fax it to:  1 323 436 6271 

Or mail it to:

Info 4 Edu Only
1300 N. Cahuenga Blvd # 362
Los Angeles, CA 90028

You must include a Primary and secondary E-mail address, as we will be emailing you all 
the reports as soon as we receive your payment.

Please Print Clearly

Primary Email Address: ___________________________________

Secondary Email Address: _________________________________


Credit Card Information:

*Card Type: [ ] Visa [ ] MasterCard [ ] Amex 

*Credit Card Number: ______________________________________

*Expiration Date: ____________

Name : _________________________________________________

Address: ________________________________________________

State/Province & Postal Code : ______________________________


If you are paying by check or money order make it payable to: Info 4 Edu Only

DISCLAIMER: Please note that this information is being provided for educational 
purposes only. The information itself is legal, while the usage of such information may be 
illegal. We do not advocate unauthorized use or theft of any services. If in doubt, check 
your local laws and act accordingly. 
NOTE: All of the publications are Copyright 2001 by Info 4 Edu Only. We aggressively 
protect our copyrights and will seek prosecution of any website, web-master, web hosting 
service or anyone else that is in violation of US & International Copyright Laws. 

To be opt out please email opt...@ao... 

[Trinux-news] Keybord mapping on laptop

[Bolognini <rl...@li...>]

Hi all,
first time here so hello world!! ;-)

Have a problem with my Acer TM 210: can't get the keyboard to work
correctly.

I'm using the 0.80rc2 images of Trinux.

I did read the docs but didn't understand where to place my profile
settings. I placed a profile file in the tux dir of my boot-disk but didn't
work (or maybe i did it the wrong way) i added the vars LANG LC_TIME and
stuff and exported them.

Could someone please show me the way or point me to some docs?

Hope i'll manage to use this distro so i could have my Linux anywhere ;-)

Thank You,
Lorenzo

Re: [Trinux-news] find or equivelent

[Matthew F. <mat...@ya...>]

> 	Yes I know that the package is really small and
> that after using it for 10
> minutes you should know where everything is, but is
> there a "find"
> equivelent available??

Find is available in the fileutil.tgz package along
with the full (non-busybox) versions of dd gzip, tar,
and there are also some tools for viewing/editing
binary files: hexdump;, strings, xxd, bvi

-mdf

__________________________________________________
Do You Yahoo!?
NEW from Yahoo! GeoCities - quick and easy web site hosting, just $8.95/month.
http://geocities.yahoo.com/ps/info1

[Trinux-news] find or equivelent

[Linux0wnz <ad...@li...>]

	Yes I know that the package is really small and that after using it for 10
minutes you should know where everything is, but is there a "find"
equivelent available??

[Trinux-news] Updated LaBrea package

[Matthew F. <mf...@ci...>]

The labrea package (labrea.tgz) has been updated to the latest version
(2.1) released yesterday


See http://www.hackbusters.net/

-------------------------------------
Matthew Franz        mf...@ci...
Security Research Engineer
Security Technologies Assessment Team

[Trinux-news] (fwd) single floppy perl mini-howto

[ciderly <ci...@co...>]

Just sent this to per...@pe..., thought you might also like a
copy, thanks for all the crazy work guys, you kick ass.
-steven

----- Forwarded message from ciderly <ci...@co...> -----

From: ciderly <ci...@co...>
Subject: single floppy perl mini-howto
To: per...@pe...
Date: Mon, 17 Sep 2001 04:53:25 -0700
User-Agent: Mutt/1.3.11i

Ok, I had this crazy item on my wishlist for awhile, and finally figured
out a solution worthy of crossing it off my list.

If you have a floppy disk, a floppy drive, a network card and network
connectivity (perhaps even dhcp) and are interested in booting a ramdisk
environment capable of a fully functional perl within 5 commands or
less, take a look at the mini-howto below, also available @
http://compulsion.org/prizes/single_floppy_perl

When writing this hackish howto, I had fanatics and perl instructors
teaching students in mind, also people without harddrives or those who
feel safer sleeping with a single-floppy perl-capable linux distribition
under their pillow.

Sincerely,
Steven Fountain (ciderly, ci...@co...)


title: getting perl running using a single floppy image in a ramdisk
environment mini-howto
author: ci...@co...


If you plan to hack this together on a laptop with a network card:
1) wget http://trinux.org/boot/trinux-0.80rc2-pcmcia.img # get the image
2) dd if=3Dtrinux-0.80rc2-pcmcia.img of=3D/dev/fd0 # put it on a floppy

Otherwise you'll probably be hacking something without the need for
pcmcia support, so you'll want to get the net image.
1) wget http://trinux.org/boot/trinux-0.80rc2-ide.img # get the image
2) dd if=3Dtrinux-0.80rc2-ide.img of=3D/dev/fd0 # put it on a floppy


Next, boot up the floppy.


When booted (with network support configured, i think it even does
dhcp), you'll install a bunch of functional client utilities automaticly
(ssh, lynx, ncftp) and you will then get dumped to a bash# prompt.

=46rom here, you'll want to type:
1) getpkg libdb
2) getpkg perlbin
3) getpkg perlcore
4) getpkg perlsite
5) getpkg perlmods


Now finally, dump yourself in code heaven:
1) perl -d -e 1

And enjoy.


(Trinux can do a lot more then this, for a full list of getpkg'able
files take a look at http://trinux.sourceforge.net/pkg/) (I'm thinking
ngrep, apache, bind, or a horde of other neat things provided from a
single floppy.)


----- End forwarded message -----

[Trinux-news] More New/Updated Packages

[Matthew F. <mf...@ci...>]

iptraf.tgz - updated to 2.5.0

http://cebu.mozcom.com/riker/iptraf/

taranis.tgz - cam poisoning sniffer (basically) new (version 0.81)

http://www.bitland.net/taranis/

-mdf

[Trinux-news] New/Updated Packages

[Matthew F. <mf...@ci...>]

winscan.tgz - added dcetest
See http://www.atstake.com/research/tools/index.html#dcetest

hogwash.tgz - http://hogwash.sf.net/

-mdf

[Trinux-news] New Packagegs (ettercap and LaBrea)

[Matthew F. <mf...@ci...>]

In the usual places:

ettercap.tgz - Ettercap 0.5.4
term.tgz     - added additional libraries for above
labrea.tgz   - Anti Code Red/Portscanning Tool by Tom Liston (version 1.4)
	       see http://www.threenorth.com/LaBrea/

-mdf

[Trinux-news] Using Trinux to fight Code Red

[Matthew F. <mf...@ci...>]

Somebody sent this to me:


http://www.incidents.org/archives/intrusions/msg01368.html

-------------------------------------
Matthew Franz        mf...@ci...
Security Research Engineer
Security Technologies Assessment Team

[Trinux-news] New ISO Available

[Matthew F. <mf...@ci...>]

see http://prdownloads.sourceforge.net/trinux/

root@samara:/usr/tmp# md5sum trinux-80rc2-2.4.5.iso 
003dfc74d6855a7deb16b0258a0d097a  trinux-80rc2-2.4.5.iso

The checksum should (eventually) show up in the release notes at:

http://sourceforge.net/project/showfiles.php?group_id=3301&release_id=44917


Thanks for all the folks who sent in bugfixes and let me know if there are
any (more) problems.

-mdf


-------------------------------------
Matthew Franz        mf...@ci...
Security Research Engineer
Security Technologies Assessment Team

RE: [Trinux-news] New/Updated Packages

[Matthew F. <mf...@ci...>]

> Xprobe	http://xprobe.sourceforge.net/	An awesome OS identifier using
> ICMP. I compiled/tested it under Redhat 7.1, it will identify just
> about any network OS in 1-3 ICMP packets. Ofir is da man when it
> comes to ICMP. :)

Just uploaded the package now. I built it a couple of days ago.

> IRPAS		http://www.phenoelit.de/irpas/docu.html  Awesome protocol
> attack suite. FX, one of the creators demonstrated it at DefCon...
> VERY effective.. 

There's been a package for about a week. The less said about this toolset
the better. ;)

-mdf

-------------------------------------
Matthew Franz        mf...@ci...
Security Research Engineer
Security Technologies Assessment Team

[Trinux-news] New/Updated Packages

[Matthew F. <mf...@ci...>]

Over the last week, I've added/updated the following tools:

fileutil.tgz  - added bzip2, gnu tar, full version of dd

irpas.tgz     - tools for testing routers

netutil.tgz   - added full version of umount (mount was already there)

smbcore.tgz   - codepages for samba (required for all smbpackages)

smbclient.tgz - smbclient from samba 2.2.1a (limited testing)

smbmount.tgz  - mount NetBIOS shares (this finally works) requires smbfs.o

wget.tgz      - added wget version 1.7

tctbin.tgz    - low-level utilities from The Coronor's Toolkit and
		Tct-utils for forensics

system.tgz    - fixed path for logrotate which caused /var to fill up
		if this package is on your boot disk you need to upgrade

ntfstools.tgz - a bunch of old NTFS tools from 
                http://linux-ntfs.sourceforge.net -- use at your 
                own risk!!!

[Trinux-news] New package: hammerhead

[Matthew F. <mf...@ci...>]

This is not directly security related, but could be useful for testing
HTTP servers:

-rw-r--r--   1 root     root        56073 Jul 10 23:01 hammerhead.tgz

Note: this is a C++ application (argggh) and requires the libc++.tgz
package.

See http://hammerhead.sourceforge.net/

-mdf

[Trinux-news] Updated nmap package

[Matthew F. <mf...@ci...>]

Fyodor released Nmap 2.54beta26 yesterday and I've upgraded the trinux
package to the latest version.

-mdf

[Trinux-news] ISO Image / Building Script and IDE Bootdisk

[Matthew F. <mf...@ci...>]

I've added a test .iso image for kernel-2.4.5. Let me know if you have any
problems. I'm still cleaning up linuxrc but it should work. 

http://trinux.org/boot/trinux-0.80rc1-2.4.5.iso       (about 5Mb)

I also added a new boot image that has IDE, iso9660, minix, ext2, NTFS,
vfat support included.

http://trinux.org/boot/trinux-0.80rc0-ide-2.4.5.img   (floppy to use) 

The script to build the iso image is in http://www.trinux.org/util/ 

You will need to modify it for your system (it assumes you have wget) and
it definitely needs more work, but it is a start.

[Trinux-news] Updated Packages

[Matthew F. <mf...@ci...>]

I finally got around to upgrading the SSH client & server packages to the
latest versin of the OpenSSH (2.9p2). The previous version as *not*
subject to some of the SSH security vulnerabilities discovered eariler
this year.

More importantly, I rewrote the startup scripts so that you can save the
contents of .ssh/ and /usr/local/etc/ssh* so the root and host keys do not
have to get regenerated each time.

So before you reboot, use the new /usr/local/bin/save-sshkeys script to
make sure the ssh_host keys in /usr/local/etc and your .ssh/identity[.pub]
(assuming you did an ssh-keygen) get tarred up and copied to the boot
floppy. That should get rid of the annoying security messages when SSHing
from and to trinux boxen.

I also upgraded the openssl package.

-mdf