Re: [cobalt-security] BIG mistake = Big problem = need help pls!

["Icehouse" <icehouse@xxxxxxx>]

Hey Mez,

I was not really thinkin when I sent that, but  someone else posted to you
about using a serial port and a laptop.... that is what I would do.... call
your host and give em some heat I mean we are literally talkin 5 minutes of
work if they do a direct connect through the serial port with a null modem
cable. all they need is your passwords.  They will spend more time walkin to
your box than actually doing the work.

I am a small reseller for another company and I have an extra raq4i  if
these people don't help you let me know and I will set you up with a good
box  and great 24/7 support. My provider would fix this for you in mere
minutes probably for free.

not advertising  just lettin you know I have an extra box I am moving off of
as I go to a larger server...

Raq4i
450MHZ (k-62)
512 MB
2-20 gig Hard Drives
300 gigs monthly transfer
Located in a major NOC
$275.00 setup   $169.00 per month I ONLY HAVE ONE...

let me know if you are interested (give me a direct E-mail or contact me
icehouse@xxxxxxx)  I have not rushed to get rid of it cause having the extra
space to play in is nice.

~Icehouse~


----- Original Message -----
From: "Mez" <mez@xxxxxxx>
To: <cobalt-security@xxxxxxxxxxxxxxx>
Sent: Saturday, March 23, 2002 2:03 AM
Subject: Re: [cobalt-security] BIG mistake = Big problem = need help pls!


> Yeah first thing I though of - but as I added ALL :ALL to hosts.deny, it
has
> blocked all protocols, FTP, pop, telnet, ssh - looks like ill have to give
> this package a try ;)
>
> -John
> ----- Original Message -----
> From: "Icehouse" <icehouse@xxxxxxx>
> To: <cobalt-security@xxxxxxxxxxxxxxx>
> Sent: Saturday, March 23, 2002 4:10 AM
> Subject: Re: [cobalt-security] BIG mistake = Big problem = need help pls!
>
>
> > What about going into the web based interface [control panel] and
> activating
> > standard telnet???
> >
> >
> > on the raq 4i
> >
> > http://www.maindomain.com/admin/
> >
> > then select conrtol panel on left
> >
> > then check telnet and scroll down to the save button click save and try
a
> > standard telnet
> >
> > depending on what you have going on theis might work?
> >
> > Hope it helps
> >
> > ~Icehouse~
> >
> >
> > ----- Original Message -----
> > From: "Mez" <mez@xxxxxxx>
> > To: <cobalt-security@xxxxxxxxxxxxxxx>
> > Sent: Friday, March 22, 2002 9:41 AM
> > Subject: [cobalt-security] BIG mistake = Big problem = need help pls!
> >
> >
> > > OK I have made a big f*** up on my cobalt Raq3 using tcp_wrappers -
> which
> > > looks like it has left everyone denied access via SSH, telnet and ftp.
> > >
> > > I was trying to make the server more secure as ive been having failed
> > loggin
> > > attemps for users therefore I added ALL: ALL to hosts.deny and THOUGH
i
> > had
> > > added my host correctly to the hosts.allow file - but it looks like I
> > havent
> > > as I am unable to ssh into the server now.
> > >
> > > The people who host the server, cobaltrack, say there is nothing they
> can
> > do
> > > except reload the OS - which is out of the questions as nothing is
> backup
> > on
> > > the server.
> > >
> > > The only access I have to the server now is via the web based
interface,
> > > which i hardly ever used. Anyways I was thinking the old way around
this
> > > would be to make a PKG file that I could load from the web based
> interface
> > > which would replace my hosts.allow and hosts.deny with CLEAN copies of
> > them,
> > > only prob is I have no idea how to make a PKG file to do this.
> > >
> > > If anyone could guide me in the right steps, some hits on where to
look
> on
> > > the net etc about writing PKG files i would be most greatfull
> > >
> > > Thanks
> > > -John
> > >
> > > _______________________________________________
> > > cobalt-security mailing list
> > > cobalt-security@xxxxxxxxxxxxxxx
> > > http://list.cobalt.com/mailman/listinfo/cobalt-security
> >
> > _______________________________________________
> > cobalt-security mailing list
> > cobalt-security@xxxxxxxxxxxxxxx
> > http://list.cobalt.com/mailman/listinfo/cobalt-security
> >
>
> _______________________________________________
> cobalt-security mailing list
> cobalt-security@xxxxxxxxxxxxxxx
> http://list.cobalt.com/mailman/listinfo/cobalt-security