🚀 go-pugleaf

And more ...


RainbowHat wrote:
> 
> ]connection for my home network of several Win9x PC's and one RH72
> 
> >>>May 26 20:49:41 torvalds network: Bringing up route unknown
> >>>succeeded
> >>>May 26 20:49:41 torvalds network: Bringing up route eth0 succeeded
> 
> >Please try the following commands.
> 
> /sbin/route
[root@torvalds /root]# /sbin/route
Kernel IP routing table
Destination     Gateway         Genmask         Flags Metric Ref    Use
Iface
tc2-ha.perth.we *               255.255.255.255 UH    0      0        0
ppp0
torvalds        *               255.255.255.255 UH    0      0        0
eth0
192.168.0.0     *               255.255.255.0   U     0      0        0
eth0
127.0.0.0       *               255.0.0.0       U     0      0        0
lo
default         tc2-ha.perth.we 0.0.0.0         UG    0      0        0
ppp0
[root@torvalds /root]#

(see 'default' above - does this look suspicious?)



> /sbin/ifconfig
[root@torvalds /root]# /sbin/ifconfig
eth0      Link encap:Ethernet  HWaddr 00:80:AD:1F:52:EB
          inet addr:192.168.0.5  Bcast:192.168.0.255  Mask:255.255.255.0
          UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
          RX packets:48213 errors:0 dropped:0 overruns:0 frame:0
          TX packets:45273 errors:0 dropped:0 overruns:0 carrier:0
          collisions:11 txqueuelen:100
          Interrupt:12 Base address:0x240

lo        Link encap:Local Loopback
          inet addr:127.0.0.1  Mask:255.0.0.0
          UP LOOPBACK RUNNING  MTU:3924  Metric:1
          RX packets:18 errors:0 dropped:0 overruns:0 frame:0
          TX packets:18 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:0

ppp0      Link encap:Point-to-Point Protocol
          inet addr:202.72.132.108  P-t-P:203.10.1.3 
Mask:255.255.255.255
          UP POINTOPOINT RUNNING NOARP MULTICAST  MTU:1514  Metric:1
          RX packets:21321 errors:105 dropped:0 overruns:0 frame:105
          TX packets:20933 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:10




> cat /proc/net/route
[root@torvalds /root]# cat /proc/net/route
Iface   Destination     Gateway         Flags   RefCnt  Use     Metric 
MaskMTU
ppp0    03010ACB        00000000        0005    0       0       0      
FFFFFFF
eth0    0500A8C0        00000000        0005    0       0       0      
FFFFFFF
eth0    0000A8C0        00000000        0001    0       0       0      
00FFFFF
lo      0000007F        00000000        0001    0       0       0      
000000F
ppp0    00000000        03010ACB        0003    0       0       0      
0000000
[root@torvalds /root]#




> cat /proc/net/rt_cache
(Very long output - too long (~100 lines) to enclose here (?))



> 
> And I'm not sure this is related or not...
> 
>             L0pht Security Advisory
> Vulnerable: Microsoft Windows95a (w/winsock2), Windows95b
>             Windows98, Windows98se and Sun Microsystems...
>   Severity: Attackers can remotely add default route entries
>             on the victims host.
> 
> --
> Regards, RainbowHat. To spoof or not to spoof, that is the IPv4 packet.
> ----+----1----+----2----+----3----+----4----+----5----+----6----+----7


Regards,
Graham Daniell