Thursday, May 30, 2013

Top of the Ticket

Political commentary from Andrew Malcolm

If you watch Al Jazeera, you know Obama's new mission for NASA: To help Muslim nations 'feel good'

Noted hard-luck critter Wile E Coyote

You know how Wile E. Coyote straps himself to the rocket and lights the fuse? And it burns. And burns. Silence. Nothing. He's poised, hopefully, awaiting launch. We wait, painfully, for the bad thing certain to happen.
That's what we've been doing for almost a week now, anticipating the explosive public reaction to word from NASA chief Charles Bolden that President Obama has tasked his once-fabled space agency with a brand-new earthbound mission that has absolutely nothing to do with space.
Perhaps not surprisingly, Bolden's stunning announcement about the taxpayer-funded space agency's new task did not come at home. It came overseas during a televised interview with Al Jazeera, the Middle Eastern TV network.
In the interview (full video below), Bolden reveals that even before the Democratic ...
... president offered him the job as top space official, Obama ordered that his "foremost" assignment was "to reach out to the Muslim world ... to help them feel good about their historic contribution to science, math and engineering."
Say what?
There's been much skepticism, criticism and suspicion about Obama's "new" space program announced in April, that it was really a beautifully wrapped downsizing and abandonment of the nation's pioneering manned space exploration.
Giving up any more Moon missions. Or unilateral space trips. Relying soon on Russia to ferry U.S. astronauts to the space station --  and maybe even the Acme Supply Co. for parts. All in order to have even more money to spend on the Democrat's expensive earthly social priorities.
Here's that longer Bolden quote about Obama to Al Jazeera:
When I became the NASA administrator -- or before I became the NASA administrator -- he charged me with three things. One was he wanted me to help re-inspire children to want to get into science and math, he wanted me to expand our international relationships, and third, and perhaps foremost, he wanted me to find a way to reach out to the Muslim world and engage much more with dominantly Muslim nations to help them feel good about their historic contribution to science ... and math and engineering.
Without the vigilant Byron York, Bolden's bold statement might have gone unnoticed at home, which perhaps was the goal.
Actually, even with the vigilant York's report and his amazing follow-up, the story has largely gone unnoted offline, drawing virtually no coverage from major newspapers and broadcast news operations. They were more focused over the holiday weekend on the latest gaffe by GOP party chairman Michael Steele, who's been filling the political clown role while VP Joe Biden was in Iraq celebrating Obama's war success.
Bolden was in the Middle East as part of a conga line of Obama folks celebrating the first anniversary of the president's Cairo speech to the Muslim world. In Bolden's own remarks in Egypt, recounted by York, the NASA chief noted it has been four decades since the first moon landing. Bolden candidly admitted that under Obama:
--"NASA is not only a space exploration agency, but also an Earth improvement agency."

--"We're not going to go anywhere beyond low Earth orbit as a single entity. The United States can't do it."
The fuse is lit. Here's the video.
-- Andrew Malcolm
Anyone can get Twitter alerts of each new Ticket item, by clicking here. Follow us @latimestot Or Like our Facebook page right here. Go here for a Kindle subscription to The Ticket, with a free trial.
Video: Al Jazeera     Photo: Acme Supply Co.
Israeli forebodings over widening Russian-Hizballah-Iraqi intervention in Syria
DEBKAfile Special Report May 29, 2013, 1:23 PM (IDT)
Russian Syrian military drill
Russian Syrian military drill
Forebodings were voiced Wednesday, May 29, by senior Israeli military officers in the face of the widening military intervention in the Syria civil war by Russia, Iran, Hizballah and latterly Iraq too. They have made Syria’s civil war the platform for a Russian contest against the West and a ladder up which Iran and its proxy Hizballah are climbing to top Middle East regional power spot.
Russia, Iran and Hizballah are winning the contest by default against an unresisting US-led West and a hesitant Israel.
 A senior IDF officer acknowledged on Wednesday, May 29, that Israel’s government and military leaders are at a loss on how to proceed. They have yet to recover from the calamitous miscalculation that Bashar Assad’s days were numbered to which they clung stubbornly for almost eighteen months.
Even today, some spokesmen refer to a “disintegrating Syria,” thereby losing sight of the major strategic and military changes overtaking the country that are entirely to Israel’s detriment as well as eroding its options against a nuclear Iran.
At a time that the US and Israel should be using their heaviest military guns to slow Iran’s race for a nuclear bomb, Tehran with Moscow's backing has brought its military assets up close to Israel’s borders in Syria and Lebanon and openly threatens to use them.
Unlike Syria and Iran, Israel can’t count on military intervention against an aggressor by supportive big powers.  According to debkafile's Washington sources, no part of the Obama administration, including its military and intelligence arms, favors military action in Syria.
Even the direct evidence of chemical warfare already afoot in Syria is unavailing.
In Addis Ababa, US Secretary of State John Kerry repeated the administration’s mantra Wednesday by denying “concrete evidence” of the use of chemical weapons in Syria.
The Secretary and the rest of NATO were deaf to the vivid testimony brought to Le Monde Wednesday by two reporters, who risked their necks by spending two months concealed in the Jobar district of Damascus. They discovered Russia or Iran had developed a chemical weapon that does not explode. The release of its poisonous gases sounds like popping the top off a can of soda and has "no odor, no smoke, not even a whistle to indicate the release of a toxic gas."
So what does happen?
The Le Monde reporters provided a graphic first-hand description.
"The men cough violently. Their eyes burn, their pupils shrink, their vision blurs. Soon they experience difficulty breathing, sometimes in the extreme; they begin to vomit or lose consciousness. The fighters worst affected need to be evacuated before they suffocate."
Wednesday morning, the Israeli Home Front rehearsed an attack on a Jerusalem suburb by a chemical-tipped missile.
 Prime Minister Binyamin Netanyahu, who watched, said the exercise is designed to protect Israeli civilians “from the threats pilling up around us.” Israel’s home front is the best protected in the world but also the most threatened, he said: “We must make sure that defense is in place before an attack.
Tuesday, Israeli Defense Minister Moshe Ya'alon voiced his certainty that the Syrian President would not use chemical weapons against Israel or treat Israelis the way he treats his own people. There is no indication that anyone in the region intends to challenge us any time soon with unconventional weapons, said the defense minister.
debkafile’s military sources find Ya’alon’s comment delusory. They don’t see why Assad would treat Israelis differently from his own people – especially since the IDF has presented him with no real deterrent. After all, none of Israel's three air strikes in January and May stopped the flow of Hizballah fighters into Syria. And meanwhile, Syrian and Hizballah leaders are declaring loud and clear that a war front against Israel is already operating from the Syrian Golan and Lebanon.
The question is who in Israel is listening. And what is being done to make sure that Assad will be prevented from using chemical weapons against Israeli military and civilian targets at a time of his convenience.
The spate of events in the last 48 hours is troubling - to say the least.
Monday, US Senator John McCain was reported to have paid a secret visit to Syria. What did this "visit" consist of? debkafile reports: The senator entered Syria from Turkey through the Kilis corridor which is the main supply route for the rebels in Aleppo, one of the few still under their control. McCain penetrated some 300 meters into Syria, had his picture taken, and left.
A US publication reported Wednesday that President Barack Obama had ordered the Pentagon to draw up plans to establish no-fly zones over Syria against Syrian warplanes. The Pentagon thereupon issued a denial: “There are no new American operational plans,” said the spokesman.
Moscow’s response was ready in place even before the report was published.
Deputy Foreign Minister Sergei Ryabkov said the S-300 anti-air missiles that Russia was supplying the Assad regime were a "stabilizing factor" that could dissuade "some hotheads" from entering the conflict.
In the grades Moscow handed out for foreign interventionists: The US and Israel and their leaders were "hotheads" while Moscow,  the calm, rational stabilizer.
In that capacity, debkafile's military and intelligence sources reveal that a huge Russian cargo plane landed in Latakia airport Wednesday with 60 tons of "humanitarian aid for Syria."
The nature of this cargo was not disclosed, but the last thing it must have been was “humanitarian” given the massive military aid Moscow is extending Assad’s army.
Moscow also knocked on the head the timorous decision by European Union foreign ministers Tuesday to lift the arms embargo for Syrian rebels, which they carefully combined with a decision not to send them weapons.
In sum, the US is not doing anything to help the rebels, Europe is not sending arms, the rebels’ Persian Gulf patrons have bowed to pressure from Washington and slashed their weapons aid, while Israel declares it wants no part of the Syrian civil war – even after it assumed the calamitous proportions of a world power contest with Israel’s arch foes gaining the upper hand.
So who is feeding the flames of the Syrian conflict with a generous supply of military hardware? Who but Russia, the self-styled "stabilizing factor”
The Free Syrian Army’s Supreme Commander Gen. Salem Idris made a desperate show of bravado Wednesday, by threatening to strike Hizballah strongholds in Lebanon if Hassan Nasrallah does not pull his brigades out of Syria within 24 hours.
Hizballah knows perfectly well that Gen. Salem is starved of weapons, just he knows that the US, Europe or Israel will not interfere with the stream of fighting strength he is pumping into Syria.
At worst, a few rockets will hit Hizballah centers in Beirut and the Beqaa Valley. Early Tuesday morning, the rebels tried to ambush Hizballah forces near the eastern town of Arsal. Their operation went badly wrong and mistakenly killed three Lebanese soldiers manning an army checkpoint.
The senior Israeli officer interviewed by debkafile put all these forebodings into words when he said: "A military and strategic catastrophe for the West and Israel is in full flight in Syria, and no one in Washington or Jerusalem is lifting a finger. Israel’s government and military heads never imagined that the Syrian war would take this turn. But we had better wake up at this eleventh hour - before it is too late.”
 

Historian: Obama helping resurrect Ottoman Empire?

Pattern seen in 'Arab Spring' interventions began in Balkans in 1990s

  • Text smaller
  • Text bigger
NEW YORK – Is Obama helping advance a grand plan by Turkey, with the support of Germany, to restore the Ottoman Empire, the Islamic caliphate that controlled much of southeast Europe, Western Asia and North Africa for more than six centuries?
That is a question posed by historian Robert E. Kaplan in an article titled “The U.S. Helps Reconstruct the Ottoman Empire,” published this week by the international policy council and think tank Gatestone Institute.
Kaplan, a historian with a doctorate from Cornell University, specializing in modern Europe, says history suggests a possible partnership between Turkey and Germany, which has seen influence over Turkey as a means of influencing Muslims worldwide for its own interests.
He asks why the U.S. government “would actively promote German aims,” including the destruction of Yugoslavia in the 1990s and the re-creation of the Ottoman Empire through the “Arab Spring.”
Kaplan points to Obama’s support of the Muslim Brotherhood, the ultimate victor in the “Arab Spring”; the U.S. backing of radical Islamic “rebel” groups in Libya with ties to al-Qaida; and current support for similarly constituted radical Islamic “rebel” groups in Syria aligned with al-Qaida.
Each of these U.S. military interventions occurred in areas that were under the Ottoman Empire.
Bring back the Ottoman Empire?
Kaplan sees a similarity between the Clinton-era attacks against the Serbs and the Obama administration hostility to well-established regimes in Libya and Syria.
He writes:
Since the mid-1990s the United States has intervened militarily in several internal armed conflicts in Europe and the Middle East: bombing Serbs and Serbia in support of Izetbegovic’s Moslem Regime in Bosnia in 1995, bombing Serbs and Serbia in support of KLA Moslems of Kosovo in 1999, bombing Libya’s Gaddafi regime in support of rebels in 2010. Each intervention was justified to Americans as motivated by humanitarian concerns: to protect Bosnian Moslems from genocidal Serbs, to protect Kosovo Moslems from genocidal Serbs, and to protect Libyans from their murderous dictator Muammar Gaddafi.
Kaplan observes that neither President Clinton nor President Obama ever mentioned the reconstitution of the Ottoman Empire as a justification for U.S. military intervention.
The U.S. offered other reasons for intervening in Serbia, including a desire to gain a strategic foothold in the Balkans, to defeat communism in Yugoslavia, to demonstrate to the world’s Muslims that the U.S. is not anti-Muslim, and to redefine the role of NATO in the post-Cold War era.
Recurring pattern
At its height in the 15th and 16th centuries, the Ottoman Empire stretched from its capital in Turkey, through the Muslim-populated areas of North Africa, Iraq, the costal regions of the Arabian Peninsula and parts of the Balkans.
Kaplan points out that since the 1990s, “each European and Middle Eastern country that experienced American military intervention in an internal military conflict or an ‘Arab Spring’ has ended up with a government dominated by Islamists of the Moslem Brotherhood or al-Qaida variety fits nicely with the idea that these events represent a return to Ottoman rule.”
In these conflicts, Kaplan sees recurring patterns employed by Clinton and Obama to justify U.S. military intervention:
Each U. S. military action in Europe and the Middle East since 1990, however, with the exception of Iraq, has followed an overt pattern: First there is an armed conflict within the country where the intervention will take place. American news media heavily report this conflict. The “good guys” in the story are the rebels. The “bad guys,” to be attacked by American military force, are brutally anti-democratic, and committers of war crimes, crimes against humanity, and genocide. Prestigious public figures, NGOs, judicial and quasi-judicial bodies and international organizations call for supporting the rebels and attacking the regime. Next, the American president orders American logistical support and arms supplies for the rebels. Finally the American president orders military attack under the auspices of NATO in support of the rebels. The attack usually consists of aerial bombing, today’s equivalent of the nineteenth and twentieth centuries’ gunboat which could attack coastal cities of militarily weak countries without fear of retaliation. The ultimate outcome of each American intervention is the replacement of a secular government with an Islamist regime in an area that had been part of the Ottoman Empire.
Kaplan cites a recent report published by John Rosenthal in the online Asian Times that discloses reports prepared by the German foreign intelligence service, the BND, attributing the massacre in the Syrian town of Houla on May 25, 2012, to the Syrian government.
Rosenthal linked the conclusions of the BND regarding the Houla massacre to the policy of the German government to support the Syrian rebellion and its political arm, the Syrian National Council.
Recalling that Germany invaded Serbia in both World Wars I and II and actively sought the destruction of Yugoslavia in the Cold War era, Kaplan wonders if the administration’s joining with Germany in the bombing of Libya, and possibly Syria as well, is an effort to help Germany fill its foreign policy objective of restoring the Ottoman Empire.
Kaplan notes that the Obama administration’s foreign policy requires it to downplay the Muslim Brotherhood and al-Qaida terrorist threat to U.S. national security.
Al-Qaida defeated, or embraced?
In the 2012 presidential campaign, Obama spoke at a campaign event in Las Vegas one day after the Sept. 11 Benghazi attack, proclaiming, “A day after 9/11, we are reminded that a new tower rises above the New York skyline, but al-Qaeida is on the path to defeat and bin Laden is dead.”
On Nov. 1, 2012, CNSNews.com reported that Obama had described al-Qaida as having been “decimated,” “on the path to defeat,” or some other variation at least 32 times since the attack on the U.S. consulate in Benghazi. It was a theme Obama repeated last week in his counter-terrorism policy speech at the National Defense University at Fort McNair in Washington, D.C.
Obama also has advanced a narrative expressing U.S. acceptance of Islam.
In his foreign policy speech delivered at Cairo University June 4, 2009, Obama explained he had known Islam “on three continents before coming to the region where it was first revealed.”
In a joint press availability with Turkey’s President Gul at Cankaya Palace in Ankara, Turkey, on April 6, 2009, Obama repudiated U.S. history since George Washington, declaring the U.S. is not a Christian country: “And I’ve said before that one of the great strengths of the United States is – although as I mentioned, we have a very large Christian population, we do not consider ourselves a Christian nation or a Jewish nation or a Muslim nation; we consider ourselves a nation of citizens who are bound by ideals and a set of values.”
Yet, despite Obama’s attempt to establish a narrative in which Islamic terrorism is not a threat to U.S. national security, evidence abounds that the radical Islamic rebels responsible for opposing Gadhafi in Libya and Assad in Syria have extensive ties to al-Qaida.
In September 2012, WND also broke the story that the slain U.S. ambassador, Christopher Stevens, played a central role in recruiting jihadists to fight the Syria regime, according to Egyptian security forces.
In December 2012, WND reported top level al-Qaida operatives are functioning with impunity in Libya under a NATO-established provisional government.
In February 2013, WND reported that the U.S. special mission in Benghazi was used to coordinate Arab arms shipments and other aid to rebels in Libya who are known to be saturated by al-Qaida and other Islamic terrorist groups.
On May 14, 2013, WND reported the attack that killed Stevens and three other Americans was an al-Qaida revenge killing that took place one day after al-Qaida chief Ayman al-Zawahiri called for retaliation for a U.S. drone strike that killed a top Libyan al-Qaida leader.
Formed by Osama bin Laden, al-Qaida is a Sunni Islamic organization, whereas the Assad regime in Syria has been arguably a client state of Iran, the only nation in the Middle East in which a majority of the Muslims are Shiites.
The conflict between Sunni and Shiite Muslims dates back to the founding of Islam when a split took place over who should succeed Muhammad, when he died in AD 632. Sunnis comprise about 75 to 90 percent of the world’s Muslims.
The Muslim Brotherhood that has come to power in the African Islamic states following the “Arab Spring” is a Sunni Islam-dominated organization that opposes the Shiites in Iran on religious grounds.
On Jan. 3, 2013, WND reported that the Muslim Brotherhood has penetrated the Obama White House, with several American Muslim leaders who work with the Obama administration identified as Muslim Brotherhood operatives who have significant influence on U.S. policy.
On Feb. 10, 2013, WND reported President Obama’s nominee to head the CIA, John Brennan, converted to Islam years ago in Saudi Arabia.
Arguably, the Obama administration’s policy of siding with the rebels in Libya and Syria may reflect the aim of isolating Shiite-dominated Iran from the rest of the Islamic world.
The logical expectation would be that a recreated Ottoman Empire headquartered in Turkey would be a Sunni organization, reflecting the Sunni-dominance in Turkey.
The Gatestone Institute website describes the organization as a non-partisan, not-for-profit international policy council and think tank dedicated “to educating the public about what the mainstream media fails to report.”
As the organization’s website explains, “Gatestone Institute conducts national and international conferences, briefings and events for its members and others, with world leaders, journalists and experts – analyzing, strategizing, and keeping them informed on current issues, and where possible recommending solutions.”
Read more at http://www.wnd.com/2013/05/historian-obama-helping-resurrect-ottoman-empire/#EFJS23vQ41Yr3I05.99

Valerie Jarrett. The Real Power & Corruption Behind The Oval Office. Part 2

Added: Monday, June 4th 2012 at 10:15am by JoAnneMor

5 / 3 ratings 

 
(Link to Part 1: http://www.blogster.com/ joannemor/ valerie-jarrett-the-real-po wer-corruption-behind-the- oval-office )
Valerie Jarrett. The Real Power & Corruption Behind The Oval Office. Part 2.
In Part 1, we told you of how Valerie Jarrett controls developing in Chicago. We told you of all the boards she sits on, her Development companies, her partner Allison Davis and her connections to Obama and Michelle.
Now we want to introduce you to other movers and shakers in the Chicago corruption machine that Valerie Jarrett controls.
Nadhmi Auchi is an Iraqi Billionaire. He was convicted of fraud in the oil for food scandal. Auchi is an arms dealer, Oil mogul and invests in many real estate properties. Auchi was barred from entering the US due to his fraud conviction.There is a lot of info on Auchi out there. More on Auchi: http://en.wikipedia.org/ wiki/Nadhmi_Auchi
Three weeks before Obama bought his mansion, Auchi loaned Rezko $3 million Dollars. The mansion deal was arranged by Rezko, who we know was already doing business with Jarrett. Remember, she was on the boards and committees that controlled real estate & development in Chicago.
The bank was Mutual bank of Harvey , run by Amrish Mahajan.
The data available in the Sun-Times spreadsheet is corroborated by the following data, which is democratically available at the Federal Election Commission ‘s website:
MAHAJAN, AMRISH
CHICAGO, IL 60607
MUTUAL BANK
OBAMA, BARACK
VIA OBAMA FOR ILLINOIS INC
12/20/2003 500.00 24020030170
04/14/2004 1000.00 24020461757
Not only was Mahajan a member of Rezko’s bundling network; his bank, the Mutual Bank of Harvey, granted Rita Rezko the $500,000 mortgage she needed in order to purchase the lot on which the Obama mansion in Chicago sits. As many of you may recall, the Obamas could not have purchased the mansion they could not afford unless transactions for the mansion and the lot closed on the same day. Obama needed to locate someone who would buy the lot, and he approached Rezko, the convicted slumlord with whom Obama toured the property before they mutually agreed to the following arrangement :
The home and lot sales closed on June 15, 2005. A land trust controlled by the Obamas bought the house for $1.65 million, and the Obamas secured a $1.32 million mortgage from Northern Trust to complete that purchase. That same day, Rezko’s wife, Rita Rezko, bought the side lot for $625,000. A $37,000- a-year Cook County employee, she secured a $500,000 mortgage from Mutual Bank of Harvey.
The structure of this transaction begs the following question: What bank would lend a government employee who earns $37,000 per annum a $500,000 mortgage? What bank would assume such a risk?
The Mutual Bank of Harvey, of course, for the Mutual Bank of Harvey’s President is a man who is deeply connected to the Chicago machine that backed Barack Obama. Indeed, Amrish Mahajan was one of Mayor Daley’s first political appointments in 1989, when he was named to a seat on Chicago’s Plan Commission, where he would be joined by Obama’s former boss and Rezko’s business partner Allison Davis and by Valerie Jarrett, Daley’s Chief of Staff who chaired the Commission from 1991-1995 . Mahajan, in other words, worked with those who devised and profited from Daley’s failed public housing experiment in Chicago , a public housing policy Obama helped fund as state Senator and US Senator .
Rezko, according to the Boston Globe , was one of the major beneficiaries of Obama’s legislative advocacy for funding of Daley’s public housing experiment. Other major beneficiaries are Jarrett and Allison Davis. Mahajan was also a beneficiary, for his bank had made $3.4 million dollars in loans to Tony Rezko’s slum landlord business since 2002 . A banker for one of the slumlords who benefitted from the Daley housing program Obama helped bankroll, Mahajan was returning a favor when he wrote a $500,000 mortgage in 2005 for the wife of one of his clients. Although Tony’s financial problems were mounting in 2005 , and althoughRita earned only $35,000 per annum, Mahajan underwrote the mortgage.
Via: http:// www.noquarterusa.net/blog/ 5382/ about-the-financial-institu tion-mentioned-in-the-sun- times-obama-tony-rezko-amr ish-mahajan-the-kenwood-ma nsion-rita-rezko/
Jarrett's long connections to Miner
" Jarrett was an associate between 1981 and 1984 at Ballard, Shepard and Pole Ltd. and then moved on to a real estate practice at Sonnenschein, Carlin, Nath and Rosenthal. But Jarrett "wasn't happy with private practice," recalled Judd Miner , ". . . and she wanted to get involved in the Washington administration." Miner recruited Jarrett to the city's Law Department with the corporation counsel under the late Mayor Harold Washington.
According to the Sun Times, “A few years later, back in private practice, Miner would make another recruiting coup: a young Harvard Law School graduate named Barack Obama. And over at City Hall, Jarrett, Daley's deputy chief of staff, would hire another lawyer fleeing corporate life, Michelle Robinson, Obama's then-fiancée.” Could it be possible that Jarrett already knew Obama at this point if she had worked for Miner? The Sun Times also mentions that Obama and Michelle's marriage might never have happened if they had not met at the Chicago law frim of Sidley & Austin in the summer of 1989. Michelle Robinson was the lawyer assigned to be his adviser. Somewhat curious....
It is noteworthy to mention that after Jarrett left Daley’s office she took Michelle Obama with her to the Chicago Housing Department to be her assistant. This coincided precisely with the time Obama was installed at Davis, Miner, Barnhill and Galland where he was writing the “bids” for Tony Rezko’s companies. Is it possible that these bids were coincidentally being approved by Jarrett and Michelle? Very curious…" VIA: http://theventingpost.com/ candidconcepts/ 114-who-is-valerie-jarrett- part-ii.html
~
Let's talk about the mansion. It is a known fact there is a lawyer named on the Deed. That lawyer is Micelli. Micelli just so happens to work at Miner Barnhill & Galland, Allison Davis' old firm. Micelli is also listed as esquire on many other Rezko, Jarrett, Davis & Obama documents.
"In 1993, Obama became an associate lawyer with a small Chicago firm, Davis, Miner, Barnhill and Galland . It was during this time that he first became involved with a real estate developer named Antoin “Tony” Rezko, who was subsequently indicted on charges of fraud, extortion and money laundering and will go on trial on Feb. 25. William Miceli, Obama’s supervisor at the law firm, said the firm represented the Woodlawn Preservation and Investment Corp., a nonprofit group that redeveloped a run-down property on Chicago’s South Side with Rezko.
What’s interesting to note is that the person the Washington Post interviewed regarding the Rezko-Obama ties, William Miceli, is the same person who is listed as the “owner” of Obama’s Chicago Greenwood home." via: http:// deathby1000papercuts.com/ 2008/12/ obamas-rezko-ties-cook-coun ty-clerks-office-lists-att orney-as-owner-of-obama-ch icago-home/
Now we know Micelli involved with Woodlawn, you know Valerie is involved We went over it.
: http:// www.chicagorealestatedaily. com/article/20091125/ CRED03/200036254/ fannie-mae-alleges-default- on-big-south-side-portfoli o#ixzz1wqIMPfTl

~~~~

Summary:
Auchi Bankrolled Rezko, Mahajan and the mansion deal.
Micelli is the lawyer who aided the deal.
Rezko facilitated it.
Valerie Jarrett was a long tiome insider, so she got a piece of every land deal. Micelli represents her Development Corp.
Allison Davis is former Partner in Davis, Miner, Barnhill  & Galland.
Judd Miner is a City Law director, partner in Miner Barnhill & Galland, Valerie Jarrett & Obama's boss on a few occaisons
Mahajan is one of the banks, but Shore Bank , Broadway bank, and Northern Trust are in the mix.
Stay tuned for Part 3.
We are discussing this expose on our show, Mon and will include the audio in part 3

Hi guys,

I set up ossec since few months now, but I have some problems with active-responses.

Active-responses work well, no problem with it.
When an alert is detected, a lot of failed authentication from the same IP for example, IP is blacklisted in the firewall, and all connections are dropped.
I use a timeout of 900s and repeated_offenders.

But, in some cases, it arrived that a legitimate IP was blacklisted : wrong password or other. It was blacklisted for 900s.

I want to manually unblock the IP, so I execute the command :
#  /var/ossec/active-response/bin/host-deny.sh delete 1.1.1.1
# /var/ossec/active-response/bin/firewall-drop.sh delete 1.1.1.1

It's ok : 1.1.1.1 is deleted from firewall's IP blacklisted IP and is also deleted from hosts.deny.

But 1.1.1.1 is still not allowing to connect to agent, until timeout of 900s expired.

My question : is there a way to manually unblock 1.1.1.1 ? before timeout expiration ?
Did active-response modify anything else, apart of adding a drop rule in firewall and an IP in hosts.deny in my case ??

I already try a reboot of agent, it doesn't help.

I'm using ossec2.6.

Thanks for any help.

Zoe
dan (ddpbsd)
10/16/12
- show quoted text -
How would we know?

> I already try a reboot of agent, it doesn't help.
>
> I'm using ossec2.6.
>
> Thanks for any help.
>
> Zoe
If you remove the IP from the hosts.deny and the firewall block, it
should be allowed. Unless you've blocked the IP somewhere else.
Zoe
10/16/12
Thanks for reply.

No, IP is not blocked anywhere else.
IP is not in firewall, neither in hosts.deny. But is still blocked until timeout expired.
After 900s (timeout), IP is allowed, but not before. Evend if deleted from firewall and hosts.deny.

The question : how is defined timeout ? Where or how can i remove it after active-response is applied ?
- show quoted text -
dan (ddpbsd)
10/16/12
On Tue, Oct 16, 2012 at 9:40 AM, Zoe <raea...@gmail.com> wrote:
> Thanks for reply.
>
> No, IP is not blocked anywhere else.
> IP is not in firewall, neither in hosts.deny. But is still blocked until
> timeout expired.
> After 900s (timeout), IP is allowed, but not before. Evend if deleted from
> firewall and hosts.deny.
>
> The question : how is defined timeout ? Where or how can i remove it after
> active-response is applied ?
>
Remove it from where-ever you set it. The supplied AR scripts don't do
anything fancy. Generally if you remove the IP from the firewall block
and from the hosts.deny block it'll be allowed. If you remove the
block from every place you have OSSEC set the block, it won't be
blocked (by OSSEC) anymore. It's that simple.
Since you haven't provided any useful information, that's all I can
help with. My guess would be you aren't using your tools correctly,
but that's just a guess.
- show quoted text -
Zoe
10/16/12
Thanks for explication.
IP is not set anywhere else.

Sorry for the lack of information :

Ossec 2.6 is installed on server and agents with Suse Linux.

# ossec.conf on Ossec Server
 <ossec_config>
...
  <command>
    <name>host-deny</name>
    <executable>host-deny.sh</executable>
    <expect>srcip</expect>
    <timeout_allowed>yes</timeout_allowed>
  </command>

  <command>
    <name>firewall-drop</name>
    <executable>firewall-drop.sh</executable>
    <expect>srcip</expect>
    <timeout_allowed>yes</timeout_allowed>
  </command>

 <command>
    <name>disable-account</name>
    <executable>disable-account.sh</executable>
    <expect>user</expect>
    <timeout_allowed>yes</timeout_allowed>
  </command>

  <command>
    <name>restart-ossec</name>
    <executable>restart-ossec.sh</executable>
    <expect></expect>
  </command>

  <command>
    <name>route-null</name>
    <executable>route-null.sh</executable>
    <expect>srcip</expect>
    <timeout_allowed>yes</timeout_allowed>
  </command>

 <active-response>
    <command>host-deny</command>
    <location>all</location>
    <level>10</level>
    <rules_id>11306</rules_id>
    <timeout>900</timeout>
    <repeated_offenders>15,30,60,120</repeated_offenders>
  </active-response>

  <active-response>-->
    <command>firewall-drop</command>
    <location>all</location>
    <level>10</level>
    <rules_id>11306</rules_id>
    <timeout>900</timeout>
    <repeated_offenders>15,30,60,120</repeated_offenders>
  </active-response>
 </ossec_config>
...

# ossec.conf on Ossec agent
 <ossec_config>
        <client>
                <server-ip>1.1.1.2</server-ip>
        </client>
        <active-response>
                <repeated_offenders>15,30,60,120</repeated_offenders>
        </active-response>
 </ossec_config>

Is there any other information that can help ?

Thanks in advance for your help.

Note : when ossec execute "firewall-drop delete" and "host-deny delete" after timeout, it's ok : IP is now allowed.
But when I execute these commands manually, firewall and hosts.deny are modified, but IP remains blocked...

Zoe
- show quoted text -
dan (ddpbsd)
10/16/12
- show quoted text -
Operating system?

> Thanks in advance for your help.
>
> Note : when ossec execute "firewall-drop delete" and "host-deny delete"
> after timeout, it's ok : IP is now allowed.
> But when I execute these commands manually, firewall and hosts.deny are
> modified, but IP remains blocked...
>
That doesn't make any sense. Are you positive you haven't missed
something? All the scripts do is remove the IP from the firewall or
hosts.deny. Perhaps the firewall rules have to be re-applied or
something?

Other than that, I have no clue. I've never seen this problem, and
don't know why your system would be blocking something without any
reason to block it (ossec doesn't directly do any blocking). You'd
think there'd be a log somewhere though...
- show quoted text -
Zoe
10/16/12
Operating System : Linux openSuse

I agree with you : that doesn't make any sense :)
Re-apply firewall rules ? already done, no change.
A copy of my ossec.conf is above, have I missed something ?
I "firewall-drop delete" on agent, have i to do it on server ? on server ad agents ? from server to agents ?
I check ossec.log on server, active-response.log on agents, nothing strange there. Nothing in system logs.
Can others log files help ?
- show quoted text -
dan (ddpbsd)
10/16/12
On Tue, Oct 16, 2012 at 11:16 AM, Zoe <raea...@gmail.com> wrote:
> Operating System : Linux openSuse
>
> I agree with you : that doesn't make any sense :)
> Re-apply firewall rules ? already done, no change.
> A copy of my ossec.conf is above, have I missed something ?
Not that I'm aware of.

> I "firewall-drop delete" on agent, have i to do it on server ? on server ad
> agents ? from server to agents ?
Only on the systems blocking the IP. And "firewall-drop delete" is not
the complete command, so hopefully you aren't getting that wrong in
production.

> I check ossec.log on server, active-response.log on agents, nothing strange
> there. Nothing in system logs.
> Can others log files help ?
>
Whatever is blocking the IP should log something, right? Turn on
logging for anything that doesn't currently log stuff like that I
- show quoted text -
Christian Beer
10/16/12
I also use active_response (OSSEC 2.6) on a Debian server and whenever I want to unblock someone I delete the firewall rule directly using iptables commands. That always works instantaneously. But I have only one machine. In your setup using server/agent you have to unblock the IP at every agent and the server separately. Running host-deny and/or firewall-drop just on one machine is not enough because it is not propagated to the others.

Regards
Christian

Am 16.10.2012 17:16, schrieb Zoe:
- show quoted text -
Zoe
10/16/12
Thanks for you reply Christian.
ah ?

"Running host-deny and/or firewall-drop just on one machine is not enough because it is not propagated to the others."
I agree it doesn't unblock on all machines, but on the single machine where IP has been unblocked, I think it has to be unblocked, no ?

Dan,
Entire command I use is : "/var/ossec/active-response/bin/firewall-drop.sh delete - 1.1.1.1"

And nothing in logs.

Zoe
- show quoted text -
Zoe
10/16/12
Other thing : when I manually run "firewall-drop add", command "firewall-drop delete" is ok, before timeout.
But when it's ossec who run it, with AR, a manual "firewall-drop delete" doesn't work...

Can you confirm me rights on /var/ossec files and directories please ?
- show quoted text -
Zoe
10/16/12
I have 52 agents, is there possible as Christian said, that I have to unblock IP on all agents before it's unblocked on just one ?

Regards.

Zoe
- show quoted text -
Zoe
10/16/12
And the winner is ......Christian !
Thanks !
- show quoted text -
Zoe
10/17/12
And of course thanks Dan.

Regards.


On Tuesday, October 16, 2012 8:00:50 PM UTC+2, Zoe wrote:
And the winner is ......Christian !
Thanks !

On Tuesday, October 16, 2012 7:12:55 PM UTC+2, Zoe wrote:
I have 52 agents, is there possible as Christian said, that I have to unblock IP on all agents before it's unblocked on just one ?
Regards.e thanks
- show quoted text -
dan (ddpbsd)
10/17/12
On Tue, Oct 16, 2012 at 2:00 PM, Zoe <raea...@gmail.com> wrote:
> And the winner is ......Christian !
> Thanks !
>
What's the answer? You have to unblock it from every system before it works?
- show quoted text -
jplee3
10/17/12
I've setup some complex rules for blocking/unblocking but used null routing. It's been a while so I'd have to refresh my memory completely, but I believe I utilized the OSSEC agent to issue a local 'route' command and could do it remotely (as opposed to logging into or running a specific script for each agent/machine). I'd imagine the same or similar could be done for iptables (or any script for that matter). 
- show quoted text -
jplee3
10/17/12
I believe agent-control is the key here:


I created a script to remove null-routes and I may have had to copy the scripts to all boxes where this was to be implemented (I don't recall if there is a mechanism in OSSEC that will push scripts down to agents). Then I used agent-control to fire off the specific scripts for removing the null-routes (this was probably per specific IP though).
- show quoted text -
dan (ddpbsd)
10/17/12
On Wed, Oct 17, 2012 at 12:54 PM, Jeremy Lee <jpl...@gmail.com> wrote:
> I believe agent-control is the key here:
>
> http://www.ossec.net/doc/manual/ar/ar-windows.html
>
> I created a script to remove null-routes and I may have had to copy the
> scripts to all boxes where this was to be implemented (I don't recall if
> there is a mechanism in OSSEC that will push scripts down to agents). Then I
> used agent-control to fire off the specific scripts for removing the
> null-routes (this was probably per specific IP though).
>
>
> On Wed, Oct 17, 2012 at 9:44 AM, Jeremy Lee <jpl...@gmail.com> wrote:
>>
>> I've setup some complex rules for blocking/unblocking but used null
>> routing. It's been a while so I'd have to refresh my memory completely, but
>> I believe I utilized the OSSEC agent to issue a local 'route' command and
>> could do it remotely (as opposed to logging into or running a specific
>> script for each agent/machine). I'd imagine the same or similar could be
>> done for iptables (or any script for that matter).
>>
These mails do not address the problem in any way. If the blocks have
to be removed from EVERY agent that implemented them before it will
work, then OSSEC has someone gained a level of clustering I never
imagined. How you remove the blocks shouldn't matter (although I still
don't know if Zoe ever tried to remove them manually).
- show quoted text -
jplee3
10/17/12
I guess I'm not understanding the original problem but was going off of what Christian was saying more so. Is the problem that an IP is being blocked on the agent? Or on the server? My understanding was that the IP was also blocked on the agent machine itself, requiring one to get onto the agent machine run iptables directly there to unblock the legit IP...? Is this *not* the case?
- show quoted text -
dan (ddpbsd)
10/17/12
On Wed, Oct 17, 2012 at 1:32 PM, Jeremy Lee <jpl...@gmail.com> wrote:
> I guess I'm not understanding the original problem but was going off of what
> Christian was saying more so. Is the problem that an IP is being blocked on
> the agent? Or on the server? My understanding was that the IP was also
> blocked on the agent machine itself, requiring one to get onto the agent
> machine run iptables directly there to unblock the legit IP...? Is this
> *not* the case?
>
From my understanding of the problem Zoe wants an IP unblocked before
the timeout on agent001. The IP is removed from hosts.deny and
iptables (through the firewall_drop.sh script, still unsure whether a
manual removal was attempted or if the results were checked for
accuracy) on agent001. The block removal was supposedly successful,
but the IP was still blocked.

Still looking for confirmation on whether it was attempted to remove
the IP blocks manually (not with firewall_drop.sh), and whether the
final solution was to remove the blocks from all agents (not just
agent001).

I just setup a test environment and everything works properly for me.
Both agents blocked the IP. I remove the IP from agent001 manually
(pfctl -t ossec_fwtable -T delete 192.168.1.1) and 192.168.1.1 can
connect again. On the second agent I used the pf.sh script
(/var/ossec/active-response/bin/pf.sh delete ddpbsd 192.168.1.1), and
192.168.1.1 was again able to connect.

I did these individually, so the block was still in place on the other system.
- show quoted text -
jplee3
10/17/12
And I thought Zoe's original intention was to "manually unblock" the IP that was unable to access the agent machine that it was blocked at. 
- show quoted text -
dan (ddpbsd)
10/17/12
On Wed, Oct 17, 2012 at 1:38 PM, Jeremy Lee <jpl...@gmail.com> wrote:
> And I thought Zoe's original intention was to "manually unblock" the IP that
> was unable to access the agent machine that it was blocked at.
>
Yep, and Zoe pasted (incorrect) commands to do so. Also, re-reading
the original email you can see:
"It's ok : 1.1.1.1 is deleted from firewall's IP blacklisted IP and is also
deleted from hosts.deny."
which assumes Zoe double checked the removal.

So removing the IP wasn't the problem, the problem was that it didn't "work."
- show quoted text -
dan (ddpbsd)
10/17/12
On Tue, Oct 16, 2012 at 9:12 AM, Zoe <raea...@gmail.com> wrote:
> Hi guys,
>
> I set up ossec since few months now, but I have some problems with
> active-responses.
>
> Active-responses work well, no problem with it.
> When an alert is detected, a lot of failed authentication from the same IP
> for example, IP is blacklisted in the firewall, and all connections are
> dropped.
> I use a timeout of 900s and repeated_offenders.
>
> But, in some cases, it arrived that a legitimate IP was blacklisted : wrong
> password or other. It was blacklisted for 900s.
>
> I want to manually unblock the IP, so I execute the command :
> #  /var/ossec/active-response/bin/host-deny.sh delete 1.1.1.1
> # /var/ossec/active-response/bin/firewall-drop.sh delete 1.1.1.1
>
Just a note for the archives, the above commands are incorrect. There
should be 3 arguments, not just 2. They give errors if you run them
like this.

I'm assuming Zoe used the correct commands, and not the ones posted.
- show quoted text -
jplee3
10/17/12
Ah I think I jumped the gun on Zoe's initial comment that it worked, assuming that Christian's suggestion was taken and was successful. But I guess we have to hear more from Zoe. 

In any case, the information I gave was just more extraneous info in case anyone was interested. Now that I think about it, I think I wrote a script that called agent-control to have it iterate through either a list or params (aka agent IDs) to force certain scripts (namely those that would unblock IPs) to run.
- show quoted text -
dan (ddpbsd)
10/17/12
On Tue, Oct 16, 2012 at 11:43 AM, Christian Beer
<cb.mai...@googlemail.com> wrote:
> I also use active_response (OSSEC 2.6) on a Debian server and whenever I
> want to unblock someone I delete the firewall rule directly using iptables
> commands. That always works instantaneously. But I have only one machine. In
> your setup using server/agent you have to unblock the IP at every agent and
> the server separately. Running host-deny and/or firewall-drop just on one
> machine is not enough because it is not propagated to the others.
>
> Regards
> Christian
>
No you don't. If those other agents aren't responsible for the traffic
you don't have to delete it on them. Of course if you delete the block
on the firewall system, but not the webserver behind it you're not
going to have a good time.
- show quoted text -