 |  |
Web Comunicaciones said:
Re: Mac Analysis
From: Mia''s Virtual Post Office
Date: Wednesday, May 30, 2001
Time: 1:26:00 am
>Did anyone try to test QDNS with MacAnalysis yet?
>
>http://www.securemac.com/macanalysis.cfm
>
>Good tool as i can see...
Crap, pure crap...
We gave this program a whirl, just like we have with many like it in the
past. It is pretty useless. Here is my "Analysis" of Mac Analysis. I go
through each error one by one and explain:
My analysis takes place on a Linux Server just to make things fair. It
is running the following: Apache/1.3.12 (Linux) mod_ssl/2.6.5
OpenSSL/0.9.5a PHP/4.0.1pl2 FrontPage/4.0.4.3
Most of what MacAnalysis finds is not anything to worry about. The
program seems a little overly paranoid about some things. Here's a
summary:
Step 1 - CGI Scanner
I believe this is a windows nt frontpage issue, but I'm not sure.
Step 2 - Viewable folders:
No need to explain this one.
Step 3 - Trojan Detection:
The happy 99 trojan is for windows and listens on port 119. Obviously our
server is running linux, and port 119 is the nntp port, so it found my
news proxy and thought it was something sinister.
Step 4 - Services/Protocol Holes:
FTP - I fixed the proftpd holes a long time ago (so there should be no
error)
SSH - Fixed this a while ago too (so there should be no error)
Telnet - Nothing to worry about here
SMTP - Fixed this a while ago too (so there should be no error)
HTTP - I think this is referring to something in older apache versions,
but I'll end up upgrading apache soon anyhow so no big deal.
NNTP: I don't understand this one. RPC has nothing to do with nntp, and
I'm not running nfs or any rpc daemons. Must be a bug in the program.
Way to go Mac Analysis...
Step 5
Nothing here
Step 6
Repeat of step 1 basically.
I sure hope they do not charge for this program any time soon. Not very
reliable.
Oh well..
jer (jer@mia.net)
Bella Mia, Inc.
High Speed Wireless - www.dslone.com
Web Hosting and Colocation - www.hostdrive.com
Nation Wide Dialup 4 years and running - www.mia.net
NetZero = What this company will "NET" --- "ZERO"
Messages In This Thread:
Return to Digital Point Solutions' Home Page