Any Hackers Here?

[preacher]

Well Im just curious if we have any hackers (amatuer or pro) here, and if they would be interested in testing my new computer. Here are the stats, it is running Mandrake Linux 9.1 using the 2.4.21 secure version of the mandrake linux kernel. The only port I have open is 80 and the version of apache I use is the one that came with Mandrake 2.0.44, and you can hit the computer with a web browser by going to http://hackthiscomputer.cjb.net

The firewall it uses is the shorewall firewall. I have no router attached to it right now. I only ask that no one uses any denial of service attacks on me, and they tell me what they found to be insecure and how to fix it. If interested email me at [email protected]

[Pissed_Macman]

Yeah I already hacked your computer a week ago. At the press of a button it will explode. You'd better not piss me off.

[Faust]

You should put a description of what the comp is / what is meant to be done to it on the HTML page.  That said I doubt anyone is getting past shorewall.

[lazygamer]

So I assume the only two ways to hack a computer are

From the inside out(trojan)
From the outside in(some special program on an open port or exploit)

Now if the firewall blocks all ports and asks the user about each request(and any applications exempt from this have MDsum checking or some sort of confirmation code), than it should be extremely hard to get in, correct? I mean if a trojan is being intercepted by the firewall(do you want to allow etc.), and outside access is blocked, than a user should be safe in most circumstances right?

[flap]

I assume you're talking about ZoneAlarm or similar under windows; iptables doesn't work on a per-application basis (firewalls aren't supposed to).

But, yes, if you have a firewall blocking all incoming connections and you're careful about what you run on your machine then you're safe.

[lazygamer]

Iptables? What are those?  

I use Kerio Personal Firewall, I'm very impressed with it actually.

[Pantso]

quote:Originally posted by lazygamer:
Iptables? What are those?        

I use Kerio Personal Firewall, I'm very impressed with it actually.

iptables is the firewall that comes with GNU/Linux specifically. Similar firewalls, come with any other *nix-like OS, as is the case with the BSDs and OS X, where the built in firewall is called ipfw.

[ May 07, 2003: Message edited by: Panos ]

[flap]

iptables is specific to Linux. I don't see how it can be in OSX, or any OS based on any other kernel; are you sure?

[Pantso]

quote:Originally posted by flap:
iptables is specific to Linux. I don't see how it can be in OSX, or any OS based on any other kernel; are you sure?

Sorry flap, my bad. All those years with Linux left me with a few habits.    The firewall that comes with OS X as well as the BSDs is very similar to iptables actually. Anyway, I'll edit the post above. Don't want to misinform anyone. Thanks for pointing it out.  

[mobrien_12]

Tried your computer from a browser and from telnet to port 80.  The connection is refused.

[Master of Reality]

me too^

[Pantso]

quote:Originally posted by M. O'Brien:
Tried your computer from a browser and from telnet to port 80.  The connection is refused.

Me too. I also did a traceroute, a port scan (just in case    ), and some pinging. All negative. Well, this computer looks safe enough.    

Will you be running PHP, MySQL etc on it or is it just for testing purposes?

[Master of Reality]

quote:Originally posted by Panos:


Me too. I also did a traceroute, a port scan (just in case       ), and some pinging. All negative. Well, this computer looks safe enough.      

.....or its off.

[Pantso]

quote:Originally posted by The Master of Reality / Bob:
.....or its off.

 

[preacher]

quote:Originally posted by M. O'Brien:
Tried your computer from a browser and from telnet to port 80.  The connection is refused.

Sorry guys, had a hard drive failure, but the page is back up. This time I opened port 22 as well as 80. Ill get around to editing the stock mandrake page later.