From owner-freebsd-security@FreeBSD.ORG Sun May 15 11:43:41 2005 Return-Path: Delivered-To: freebsd-security@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 19A5616A4CE for ; Sun, 15 May 2005 11:43:41 +0000 (GMT) Received: from osl1smout1.broadpark.no (osl1smout1.broadpark.no [80.202.4.58]) by mx1.FreeBSD.org (Postfix) with ESMTP id AD9F843DE5 for ; Sun, 15 May 2005 11:43:40 +0000 (GMT) (envelope-from des@des.no) Received: from osl1sminn1.broadpark.no ([80.202.4.59]) by osl1smout1.broadpark.no (Sun Java System Messaging Server 6.1 HotFix 0.05 (built Oct 21 2004)) with ESMTP id <0IGJ003ZEAEUH650@osl1smout1.broadpark.no> for freebsd-security@freebsd.org; Sun, 15 May 2005 15:49:42 +0200 (CEST) Received: from dsa.des.no ([80.203.228.37]) by osl1sminn1.broadpark.no (Sun Java System Messaging Server 6.1 HotFix 0.05 (built Oct 21 2004)) with ESMTP id <0IGJ000UP4Q6MNM0@osl1sminn1.broadpark.no> for freebsd-security@freebsd.org; Sun, 15 May 2005 13:46:54 +0200 (CEST) Received: by dsa.des.no (Pony Express, from userid 666) id 1F3FF45165; Sun, 15 May 2005 13:43:06 +0200 (CEST) Received: from xps.des.no (xps.des.no [10.0.0.12]) by dsa.des.no (Pony Express) with ESMTP id 7FBF545131; Sun, 15 May 2005 13:43:02 +0200 (CEST) Received: by xps.des.no (Postfix, from userid 1001) id 7524833C3B; Sun, 15 May 2005 13:43:02 +0200 (CEST) Date: Sun, 15 May 2005 13:43:02 +0200 From: des@des.no (=?iso-8859-1?q?Dag-Erling_Sm=F8rgrav?=) In-reply-to: <245f0df105051408291dd3b641@mail.gmail.com> To: "Drew B. [Security Expertise/Freelance Security research]." Message-id: <86acmwd8ah.fsf@xps.des.no> MIME-version: 1.0 Content-type: text/plain; charset=iso-8859-1 Content-transfer-encoding: quoted-printable X-Spam-Checker-Version: SpamAssassin 3.0.2 (2004-11-16) on dsa.des.no References: <245f0df105051408291dd3b641@mail.gmail.com> User-Agent: Gnus/5.110002 (No Gnus v0.2) Emacs/21.3 (berkeley-unix) X-Spam-Status: No, score=-2.8 required=5.0 tests=ALL_TRUSTED,AWL autolearn=disabled version=3.0.2 X-Spam-Level: cc: freebsd-security@freebsd.org Subject: Re: Need some help X-BeenThere: freebsd-security@freebsd.org X-Mailman-Version: 2.1.1 Precedence: list List-Id: Security issues [members-only posting] List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 15 May 2005 11:43:41 -0000 "Drew B. [Security Expertise/Freelance Security research]." writes: > I would like to ask for some specialist assistance in dissecting a > 'rootkit' (seems to be massmailing specific,crafted somehow from > another kit perhaps) Uninformed people would think it logical to contact the FreeBSD Security Officer (so@freebsd.org) before discussing security issues publicly. Of course, being a security expert, you know better than those uninformed people. DES --=20 Dag-Erling Sm=F8rgrav - des@des.no