Passive & Captive Mode

[email protected]
Newsgroups gmane.network.nocat
Message-ID <[email protected]>
Good Morning

I have now got Nocat to work under Passive mode. But, it will not work 
under Captive mode. I can login but, it return an error Mac 
undefine.  Gateway is working as NAT. How secure is Passive mode? Have any 
come across this problem?

Below is the error I get in Captive mode:

[Fri Dec 03 18:12:04 2004] [error] [client 172.29.23.6] [2004-12-03 
18:12:04] User testuser from 172.29.23.6 requests popup
[Fri Dec 03 18:27:24 2004] [error] [client 172.29.23.6] [2004-12-03 
18:27:24] User UNKNOWN from 172.29.23.6 requests form
[Fri Dec 03 18:27:46 2004] [error] [client 172.29.23.6] [2004-12-03 
18:27:46] User ds10025 from 172.29.23.6 requests form, referer: 
https://xx.xx.xx.xx/cgi-bin/login?redirect=http%3a%2f%2fwww%2egoogle%2ecom%2f&token=%241%2464664777%24hcCTbTOnVrOUk3Jpglcae%2f&mac=00%3a02%3aB3%3a09%3a11%3a95&timeout=600
[Fri Dec 03 18:27:46 2004] [error] [client 172.29.23.6] [2004-12-03 
18:27:46] Request from local ip 172.29.23.6, directing to local gateway 
172.29.23.07., referer: 
https://xx.xx.xx.xx/cgi-bin/login?redirect=http%3a%2f%2fwww%2egoogle%2ecom%2f&token=%241%2464664777%24hcCTbTOnVrOUk3Jpglcae%2f&mac=00%3a02%3aB3%3a09%3a11%3a95&timeout=600
[Fri Dec 03 18:27:46 2004] [error] [client 172.29.23.6] [2004-12-03 
18:27:46] gpg --clearsign --homedir=/usr/local/nocat/pgp --keyring 
trustedkeys.gpg --no-tty -o- returned error message:, referer: 
https://131.111.38.18/cgi-bin/login?redirect=http%3a%2f%2fwww%2egoogle%2ecom%2f&token=%241%2464664777%24hcCTbTOnVrOUk3Jpglcae%2f&mac=00%3a02%3aB3%3a09%3a11%3a95&timeout=600
[Fri Dec 03 18:27:46 2004] [error] [client 172.29.23.6] gpg: WARNING: 
unsafe ownership on homedir "/usr/local/nocat/pgp", referer: 
https://131.111.38.18/cgi-bin/login?redirect=http%3a%2f%2fwww%2egoogle%2ecom%2f&token=%241%2464664777%24hcCTbTOnVrOUk3Jpglcae%2f&mac=00%3a02%3aB3%3a09%3a11%3a95&timeout=600
[Fri Dec 03 18:27:46 2004] [error] [client 172.29.23.6] gpg: WARNING: using 
insecure memory!, referer: 
https://131.111.38.18/cgi-bin/login?redirect=http%3a%2f%2fwww%2egoogle%2ecom%2f&token=%241%2464664777%24hcCTbTOnVrOUk3Jpglcae%2f&mac=00%3a02%3aB3%3a09%3a11%3a95&timeout=600
[Fri Dec 03 18:27:46 2004] [error] [client 172.29.23.6] gpg: please see 
http://www.gnupg.org/faq.html for more information, referer: 
https://xx.xx.xx.xx/cgi-bin/login?redirect=http%3a%2f%2fwww%2egoogle%2ecom%2f&token=%241%2464664777%24hcCTbTOnVrOUk3Jpglcae%2f&mac=00%3a02%3aB3%3a09%3a11%3a95&timeout=600
[Fri Dec 03 18:27:46 2004] [error] [client 172.29.23.6] [2004-12-03 
18:27:46] Check shutdown, referer: 
https://xx.xx.xx.xx/cgi-bin/login?redirect=http%3a%2f%2fwww%2egoogle%2ecom%2f&token=%241%2464664777%24hcCTbTOnVrOUk3Jpglcae%2f&mac=00%3a02%3aB3%3a09%3a11%3a95&timeout=600
[Fri Dec 03 18:27:46 2004] [error] [client 172.29.23.6] [2004-12-03 
18:27:46] Shutdown gateway socket: Transport endpoint is not connected, 
referer: 
https://xx.xx.xx.xx/cgi-bin/login?redirect=http%3a%2f%2fwww%2egoogle%2ecom%2f&token=%241%2464664777%24hcCTbTOnVrOUk3Jpglcae%2f&mac=00%3a02%3aB3%3a09%3a11%3a95&timeout=600
[Fri Dec 03 18:27:46 2004] [error] [client 172.29.23.6] [2004-12-03 
18:27:46] Use of uninitialized value in numeric eq (==) at 
/usr/local/nocat/lib/NoCat/AuthService.pm line 193., referer: 
https://xx.xx.xx.xx/cgi-bin/login?redirect=http%3a%2f%2fwww%2egoogle%2ecom%2f&token=%241%2464664777%24hcCTbTOnVrOUk3Jpglcae%2f&mac=00%3a02%3aB3%3a09%3a11%3a95&timeout=600
[Fri Dec 03 18:27:46 2004] [error] [client 172.29.23.6] [2004-12-03 
18:27:46] Use of uninitialized value in concatenation (.) or string at 
/usr/local/nocat/lib/NoCat/AuthService.pm line 199., referer: 
https://xx.xx.xx.xx/cgi-bin/login?redirect=http%3a%2f%2fwww%2egoogle%2ecom%2f&token=%241%2464664777%24hcCTbTOnVrOUk3Jpglcae%2f&mac=00%3a02%3aB3%3a09%3a11%3a95&timeout=600
[Fri Dec 03 18:27:46 2004] [error] [client 172.29.23.6] [2004-12-03 
18:27:46] Use of uninitialized value in concatenation (.) or string at 
/usr/local/nocat/lib/NoCat/AuthService.pm line 199., referer: 
https://xx.xx.xx.xx/cgi-bin/login?redirect=http%3a%2f%2fwww%2egoogle%2ecom%2f&token=%241%2464664777%24hcCTbTOnVrOUk3Jpglcae%2f&mac=00%3a02%3aB3%3a09%3a11%3a95&timeout=600
[Fri Dec 03 18:27:46 2004] [error] [client 172.29.23.6] [2004-12-03 
18:27:46] Gateway returned  () for 00:02:B3:09:11:95., referer: 
https://xx.xx.xx.xx/cgi-bin/login?redirect=http%3a%2f%2fwww%2egoogle%2ecom%2f&token=%241%2464664777%24hcCTbTOnVrOUk3Jpglcae%2f&mac=00%3a02%3aB3%3a09%3a11%3a95&timeout=600
[Fri Dec 03 18:27:46 2004] [error] [client 172.29.23.6] [2004-12-03 
18:27:46] Display error codes, referer: 
https://xx.xx.xx.xx/cgi-bin/login?redirect=http%3a%2f%2fwww%2egoogle%2ecom%2f&token=%241%2464664777%24hcCTbTOnVrOUk3Jpglcae%2f&mac=00%3a02%3aB3%3a09%3a11%3a95&timeout=600
[Fri

Also, in the error log I'm getting following errors:

[Wed Jan 05 20:40:24 2005] [error] [client 66.221.36.226] File does not 
exist: /usr/local/nocat/htdocs/board
[Wed Jan 05 20:40:24 2005] [error] [client 66.221.36.226] File does not 
exist: /usr/local/nocat/htdocs/phpbb
[Wed Jan 05 20:40:24 2005] [error] [client 66.221.36.226] File does not 
exist: /usr/local/nocat/htdocs/phpbb2
[Wed Jan 05 20:40:24 2005] [error] [client 66.221.36.226] File does not 
exist: /usr/local/nocat/htdocs/phpBB
[Wed Jan 05 20:40:24 2005] [error] [client 66.221.36.226] File does not 
exist: /usr/local/nocat/htdocs/phpBB2
[Wed Jan 05 20:40:24 2005] [error] [client 66.221.36.226] File does not 
exist: /usr/local/nocat/htdocs/phpmyadmin
[Wed Jan 05 20:40:24 2005] [error] [client 66.221.36.226] File does not 
exist: /usr/local/nocat/htdocs/phpmyadmin
[Wed Jan 05 20:40:25 2005] [error] [client 66.221.36.226] File does not 
exist: /usr/local/nocat/htdocs/forum
[Wed Jan 05 20:40:25 2005] [error] [client 66.221.36.226] File does not 
exist: /usr/local/nocat/htdocs/board
[Thu Jan 06 05:21:15 2005] [error] [client 216.235.75.100] Directory index 
forbidden by rule: /usr/local/nocat/htdocs/
[Thu Jan 06 08:41:13 2005] [error] [client 218.17.76.91] Directory index 
forbidden by rule: /usr/local/nocat/htdocs/


Is someone trying to hack into the system?

Regards

Dan
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.