Re: [cobalt-security] Re: checking for haqs

["Lawrence Frewin of Accommodation.com" <Lawrence@xxxxxxxxxxxxxxxxx>]

Hi Rev,

Ramen & Lion are worms that infect your system, you don't want to be
installing them voluntarily!

More info on Lionworm, including a check for it (Lionfind), can be found at
http://www.sans.org/y2k/lion.htm

Also try their search for Ramen & T0rn

LF



----- Original Message -----
From: "Revd leonard payne" <vicarage@xxxxxxxxxxxxxx>
To: <cobalt-security@xxxxxxxxxxxxxxx>
Sent: Monday, March 26, 2001 12:25 PM
Subject: [cobalt-security] Re: checking for haqs


>
>
> On this list I have seen mention of  Lion, Lionfind and Ramen
>
> Google cannot find Lionfind
>
> What do these packages do - can they help me secure my server.
>
> meantime - does anyone on this list have a four step or 10 step plan for
> secujring a raq4i
>
> at Present all I have is
>
> 1. all cobalt patches applied and uptodate
>
> 2. telnet disabled - ssh only
>
> 3. Portsentry and logcheck on
>
> 4. Chkrootkit applied
>
>
> I am looking to put on tripwire but can't find anyone with a working
policy
> file.
>
> Could anyone help in any way to secure my box before we go live at easter
??
>
>
> Blessings
>
> Revd Leonard
>
> _______________________________________________
> cobalt-security mailing list
> cobalt-security@xxxxxxxxxxxxxxx
> http://list.cobalt.com/mailman/listinfo/cobalt-security
>