Great Circle Associates Firewalls
(September 1996)
 

Indexed By Date: [Previous] [Next] Indexed By Thread: [Previous] [Next]

Subject: Oddly changing FW-1 files
From: Daniel Baldoni <baldo_d @ freport . wa . gov . au>
Date: Sun, 8 Sep 1996 17:06:51 +0800 (WST)
To: firewalls @ greatcircle . com
Organisation: Fremantle Port Authority

G'day folks,

A regular TripWire check across our bastion has shown a change in a file I
can't explain and I was wondering if anybody out there can help me nail down
a cause (hopefully, other than an intruder).

The file in question is modules/fwmod.5.3.o under the Firewall-1 installation.
At approximately the indicated file-change time, the Firewall-1 license was
upgraded but our operations staff have not listed that file in their regular
TripWire reports to me (and the new license went in about 2 weeks ago).

So, can anybody out there shed some light on this?  Thanks in advance.

-----------------------------------------------------+-------------------------
Phone:  +61-9-430-3439                               | Systems Administrator
FAX:    +61-9-439-3431                               | Fremantle Port Authority
URL:    http://www.freport.wa.gov.au/dept/isb/daniel | 1 Cliff Street
-----------------------------------------------------+ Fremantle
#include <std/disclaimer.h>                          | Western Australia, 6160
-----------------------------------------------------+-------------------------
"Any time there's something so ridiculous (...) that no rational systems
 programmer would even consider trying it, they send for me"
  - Paraphrased from "King of the Murgos" by David Eddings

Indexed By Date Previous: Undeliverable Message
From: <MAILER-DAEMON @ sbnsw . com . au>
Next: wu-ftpd question
From: Ming Lu <mlu @ hq . si . net>
Indexed By Thread Previous: Re: curios traceroute
From: Chris Lonvick <clonvick @ cisco . com>
Next: Re: Oddly changing FW-1 files
From: george @ neato . org

Google
 
Search Internet Search www.greatcircle.com