Security :: Lots Of CRON Spam From Root. Normal?

Jan 25, 2010

Take a peek at this:

Code:
Jan 23 20:15:01 localhost CRON[22629]: pam_unix(cron:session): session opened for user root by (uid=0)
Jan 23 20:15:01 localhost CRON[22629]: pam_unix(cron:session): session closed for user root

[code]....

View 3 Replies


ADVERTISEMENT

CentOS 5 :: Setup A Cron In /var/spool/cron/root

Feb 16, 2010

I have set up a cron in /var/spool/cron/root

*/15 * * * * /usr/bin/phplist.sh

I can see in /var/log/cron that it is running every 15 minutes but it has no effect. It is not doing the commands in the bash script.

If I run /usr/bin/phplist.sh right in the shell it works great.

View 3 Replies View Related

Ubuntu :: Copying Lots And Lots Of Data (and Preserving Emblems)?

Oct 26, 2010

I am currently in the process of moving around 20TB of data from one server to another. Security is not a concern, since the data are freely available to anyone on our network anyway. There are a couple of things that I'm trying to decide on:

(1) protocol choice

Of all the choices I have--nfs, ftp, scp, rsync, samba--has anyone done any benchmarking to show which would be the fastest/most robust transfer protocol? I know nfs has slow write speeds for synchronous transfers. Asynchronous would be faster, but less robust. I'm leaning toward rsync since it performs md5sums to confirm the file transfers. (Remember if there's a 1 in a billion chance that a byte will get corrupted, then I'll have 20,000 corrupt bytes in the transfer.)

(2) Nautilus emblems

We use emblems in Nautilus to categorize files. The old and the new server have the same directory structure.Is there any way to copy the Nautilus emblems from the old server to the new server. What I want is that if a user had marked a particular file with a star on the old server, then that file would be marked with a star on the new server when he/she logs in.

View 1 Replies View Related

Ubuntu :: Way To Run CRON Job For Something That 'normal' Users Need To Run As SUDO?

Jun 5, 2010

As per subject, what's the best way to run a CRON job for something that "normal" users need to run as SUDO? There is a problem with the internal clock on my PC so at a regular time (every hour or day for example) I want to sync with my Network Time server. I use "sudo ntpdate time.bgr.local" as it is now and have to enter my user's password for it to work.I know root is disabled by default and would like to keep it that way if possible but if I have to enable it and then add it to root's cron list the so be it but would prefer not to.

View 5 Replies View Related

Software :: Rsync Behaves Differently Under Cron And Under My Normal Environment

Mar 16, 2010

I am making a backup on an ntfs disk, mounted with:

using the following command:

Running this (or rather the shell script containing it) from the command line is OK, but if I run it as a cron job, I get thousands of messages:

(without line breaks, actually).

These files are all ordinary files made under Windows; the above should read "offici�le stukken", and from the command line it does, but not in cron.

I guess I need to set an environment variable, but which one?

View 1 Replies View Related

Ubuntu Security :: Is My Machine Being Used For Spam

Dec 26, 2010

When i run

Code:

I sometimes see

Code:

So i'm wondering if this means my ubuntu server box is being used for spam or something? There are no other (human) users on the computer and i don't use it to send mails.

I've run

Code:

In paranoia, but still when i run

Code:

I get

Code:

And sometimes

Code:

Just thought i should ask before starting the tedious process of reinstalling and restoring the system.

View 2 Replies View Related

Security :: Ip Is Blocked For Sending Spam

Nov 18, 2010

We have a spam in our network and we installed antivirus in all our systems and cleaned the virus from all pc's after that i had removed my ip from the database of blocked ip's but still my ip is blocked for sending spam i don't know from which pc the spam is going on the internet.

so i have a question that my proxy server is redhat linux and as a newbie i don't know the command's to find out which pc is creating large bandwidth to the internet. If you tell the command how to see which pc is sending spam then i will discard that pc. Also i want a strong firewall to stop spam activities.

View 6 Replies View Related

Ubuntu :: Switch From Root (#) To Normal Non-root Prompt($)?

Mar 20, 2010

how do i switch from root (#) to normal non-root prompt($). I'm new to linux

View 3 Replies View Related

Ubuntu Security :: Denyhosts Working \ First Time Adding Lots Of Ips To The Hosts.deny?

May 16, 2011

I just set up denyhosts and it worked properly the first time adding lots of ips to the hosts.deny.I then set it to run every 12 hours noon and midnight.I wanted to see if ran properly and I got all this.Does it look like its working?

Code:
May 15 12:00:01 hyrule CRON[14286]: (root) CMD (python /usr/share/denyhosts/denyhosts_ctl.py -c /usr/share/denyhosts/denyhosts.cfg )

[code]...

View 4 Replies View Related

Ubuntu Security :: IM Spam From Genuine Contacts

Mar 8, 2010

I, as many here, have friends on different IM accounts (and btw, so great that we have pidgin and empathy and not have to deal with 3 different softwares to talk to them) and of all that I have... which are not so many... one of them sends me spam, not all the time, but it happens and I kind of feel sorry for her so I'd like to see if there's a way for her to retake control of her account or if she can't do anything at all with it.

I have other friends in MSN but I get spam only from her and she's given up on how to fix it cause she doesnt know how to. I did a search (and keep looking for more in the web) and so far it doenst look promising (but is also because I dont know what else to do). The problem is I get messages which I know for sure are spam, cause her english is more limited and the messages are very polished in that regard.

I got this from another discussion elsewhere: "troutbot = These bots get your IM from scraping the Internet screenname and connect you randomly to someone else. While you're talking to the troutbot, they're just an intermediary connecting you to some other guy who also had his IM scraped." So far the times I get spam... the other side never answers, but if my friend is online she can. I thought that on these IM services... if you are logged in nobody else can log in with your username/password...

View 4 Replies View Related

Security :: Spam Filter Software For ISP Environment.

Jan 24, 2011

We operate a small ISP and are currently using a debian distro as our gateway server.Recently we have had an increased number of spam issues with customers (not them sending it directly, rather the customer getting infected with a virus/malware and then their computer becoming a bot).I'd like to set up another gateway of sorts to sit after our authentication gateway but before our backbone to provide spam filtering (and hopefully virus filtering) for any traffic passing through which might be email.I've tried searching for any linux based software which would suit, but I'm coming up empty.

Surely there's something already out there which can perform this task.Finally, just to clarify, I'm not talking about spam filtering for email accounts we host ourselves (this is built into our mail server); I'm talking about spam originating from customers PC's which is passing through our gateway (but not our mail server).

View 1 Replies View Related

Ubuntu Security :: Spam Received From Own Hotmail Account

May 3, 2010

After reading everything that says you don't need an anti-virus for Linux. OR Linux doesn't get viruses. Guess what I have a Virus. I don't know which one, but it is sending out spam emails from my webmail, MSN, account. I do not have a local client installed. I am guessing it is linking into MSN through Pidgin, getting the addresses there, and sending the spam, somehow, through MSN. Actually one MSN and one Hotmail account. I also have not been able to find an anti-virus program for Ubuntu. There do not seem to be any listed in the software repositories that Ubuntu links into. How do I get rid of it? My contacts are starting to get upset.

View 9 Replies View Related

Fedora Security :: Script To Add Security Spin Tools To Normal Installation

May 22, 2011

love security/pentest tools. This script adds ALL the tools from the Security Spin, plus Metasploit. Feel free to modify it if need be.

View 12 Replies View Related

Fedora Security :: Install Security Lab Menu On A Normal 13 Installation?

May 30, 2010

Is it possible to install security lab menu on a normal Fedora 13 installation? I don't want to use security spin.

View 14 Replies View Related

Security :: Apache Exploited To Send Out Spam From Mailform On Website?

Oct 7, 2010

I have a server with a couple of sites on it. Some of them have a webform where people can send them emails that they are interested in their work etc. though the "To:" and "From:" adress can't be change by the enduser, you can only enter text and press send. However it seems that someone (not on the server) has found a hole/exploit to use those webforms to send mails to who ever he wants.. I have the webserver setup with ssmtp (simple smtp) and it just forwards the mail sent from the server to my mail-server and there on it sends it out on the internet. If I check my log on the mail-server I can see the whole smtp session, where it's comming from and where it's going etc. I see that it comes from my webserver and over there I only have these log entries:

Oct 6 22:04:47 ettan2 sSMTP[1771]: Sent mail for itaumail@itau.com.br (221 2.0.0 Bye) uid=204 username=torget outbytes=3290

There are loads of those log entries, mostly at after office-hours between 17:00 and 7:00 I have scanned through all the Apache logs and can't find Anything that point to the e-mail addresses used or something like that. The reason I found this out was because he tries to send to a host that doesn't allow connection on port 25 so all the mails got stuck in the queue, over 1000 atm.. I'm using Apache 2.2 and Postfix 2.6 on a Debian Lenny install. What can I do to find out how he's doing this and close the "exploit"? Who would you recommend to setup the mail() thing in PHP for most security?

View 6 Replies View Related

Server :: Sending Spam To The Spam Folder?

Apr 30, 2009

I just setup SpamAssassin and what not following this tutorial

[URL]

I am using CentOS 5.3. I was half way through that and got an email that had ***SPAM*** in the subject. Haven't received any more. First of all I want to know if spam will still get delivered, and just have a modified subject. Second, I want to know how to set it up so Spam goes to a user's spam mailbox (Virtual Users). And third of all, is it possible to disable spam filtering on a user basis, preferably using MySQL tables? Is it possible for users to mark a message as spam, and all further messages sent from that address will be sent to spam folder but only for that user?

EDIT: Yes spam is getting delivered with a modified header, on the server site, how can i deliver to spam folder? how to create IMAP virtual mailboxes on request without having to send an email to them first? Using virtual users with Courier Imap

View 3 Replies View Related

Ubuntu Security :: Add Smtp Authentication To Postfix Installation Used As Spam Filter For Exhange Server

Feb 26, 2010

I followed this How To (https://help.ubuntu.com/community/Postfix) in order to add smtp authentication to my Postfix installation used as spam filter for my exhange server, and it'seem all ok; the only thing that I don't understand is where I list all the users (with passwords) that I authorize to send mail through my server...

View 3 Replies View Related

Server :: Forwarding Spam To A Spam Box?

Aug 25, 2009

I currently have the following email server set up:

Postfix with mysql backend
Dovecot
clamav
spamassassin
amavisd

And it all works great. However I would like it for amavisd to forward all the marked spam into a folder on each user account, but I cannot figure this out.

View 5 Replies View Related

OpenSUSE :: Allow Normal User To Run Root Stuff?

May 19, 2010

I would like to allow normal users to run some root scripts (e.g the sound subsytem [alsa]) in cases sound is stuck. What is the best way to allow this to happen in opensuse? There are many ways to do that (and I do not know how to use any of them ) and I am not sure which one is more suse all right.

View 6 Replies View Related

General :: Restrict Root To SU To Normal User

Mar 11, 2010

Is there way we can restrict root to su to normal user. Or at least a way to prompt for the password when root tries to su <username>.

View 3 Replies View Related

Server :: Login Root From Normal User?

Aug 4, 2010

When I try to login root from my normal user, I can see this:

Code:
Cannot exec /usr/libexec/openssh/sftp-server: File or directory doesn't exist
(Translateted from my nativ language)

I think that is my bad shell configuration so I check file /etc/ssh/sshd_config and see in the end (this lines couse this bug):

Code:
Match User root
ChrootDirectory /home
AllowTCPForwarding no
X11Forwarding no

[Code].....

View 2 Replies View Related

Security :: Comments Added To Website Have "http://Yourwebsite" - Is It Spam

Jul 26, 2010

On my website/blog I've gotten a couple of comments having what seems to be regular content (name, mail, message), but where the sender website field is set to "http://Yourwebsite". I find it strange that two comments from separate individuals fill the sender website field with this text. Is this possible to find out if these comments are spam or not? Based on the messages alone they don't seem to be, even though it is possible. From what I know the comments code don't enter this value by default.

View 2 Replies View Related

Ubuntu Servers :: Cron For Root Does Not Run

Jan 28, 2010

Cron for root does not run,it's 8.04LTS ubuntu server,however Cron runs for other users,Can anyone help?i've checked many times that i have the right syntax.

View 9 Replies View Related

Ubuntu :: Running Cron As Root?

Jun 25, 2011

I have an external usb hard drive that spins down every 10 min. The commands in 'hdparm' do nothing to override the internal settings. So, I wrote a script to touch a file every 5 minutes, and it will run as root because of the mount command, and I want it to run for every user. The script is executable, owned by root, and root is the group, with 755 permissions.

no_sleep.sh in /usr/sbin:

Code:
#!/bin/bash
# Script to keep external drive from spinning down
diskmounted=$(mount | grep Backup | wc -c)

[Code]....

View 4 Replies View Related

Ubuntu :: Get Root Script To Run A Command As Normal User?

Jun 8, 2010

Because I have a flaky wireless device, I occasionally get a hung connection and this script gets things running again in just a few seconds except obviously the boldfaced item, as it still tries to run in the root directory and gives errors:

Configuration file "/root/.kde/share/config/knetworkmanagerrc" not writable.
Please contact your system administrator.

So I am not sure how to get knetworkmanager to run as me, the user ubuntu in the /home/ubuntu directory

#!/bin/bash
service network-manager stop
sleep 1
killall -9 knetworkmanager

[code]....

View 1 Replies View Related

Software :: Login As Root Similar Normal User?

Dec 12, 2008

I need to login as root , when linux starts to show login window

But it shudnt be as
1) spawning a new terminal and do commands lik startx -- :3
2) without going in recovery mode

I need to login through login window as normal process

View 7 Replies View Related

Slackware :: Managed USB Pen-drive As Root But Cant Do It As A Normal User?

Apr 28, 2010

I am using Slackware 13.0 and i have managed to work with my USB pen-drive as root but i cannot do it as a normal user.

View 14 Replies View Related

Security :: Bypassing Normal Login UI

Nov 16, 2010

I was under the impression the Linux (in my case the Fedora OS) is very secure. However I've learnt with deep concern that that one can have access to the system during system startup i.e one can give various startup directives and bypass the normal login UI to have direct root access.

Is there a way to disble this so that the directives during startup are fixed and cannot be altered. I would like to make the system secure to the maximum extent possible.

View 5 Replies View Related

Ubuntu Servers :: Cron Job Doesn't Run Without Root

Feb 10, 2010

I am unable to run my cron tab job without root password.I made a little research on the forums and appearantly it should be changed.Must I change "passwd" part with my root password?

View 9 Replies View Related

Ubuntu :: Cron Job As Root Priveleged Access?

Sep 22, 2010

I have two users in my system. Admin(Root) , and "student". I am making a bootable USB with Ubuntu 10.04 with two partitions. What i need is a cron-job who copies some files that the student has made(from the first partition) onto a partition which he is not allowed to access. The way i thought it should be done was making a root cron-job which mounts the drive and then copies the documents, and maybe unmounts it again.

The problem with this is that, when i mount it, wouldnt it be accessible to the "student" as well then? Since i give him sudo-rights and mounts the drive in the background for him? Alternatively i could unount it straight after the copying is done, but then it would do this too often I guess.

View 2 Replies View Related







Copyrights 2005-15 www.BigResource.com, All rights reserved