OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
Subject: Re: Denial of Service.... anyone else see this attempt.
From: tomb (tombcgf.net)
Date: Wed Feb 23 2000 - 18:55:22 CST


I totally disagree as long as the machine in question is a FreeBSD box.
Although there is very little we can do to prevent this kind of
activity. The information IS of interest. If nothing else provides us
us with stat's on who's doing what and where.

The last thing we should be doing is discouraging people from sending
information relating to FreeBSD security.

If it seem's like it belongs on a different list then post it on and
politely re-direct the initator to that list.

Tom

Cy Schubert - ITSD Open Systems Group wrote:
>
> I'd like to say to all on this list that this type of message should
> probably not be posted here on FreeBSD-Security. INCIDENTSsecurityfocu
> s.com is a better place for this. They discuss this and many other
> types of incidents.
>
> Regards, Phone: (250)387-8437
> Cy Schubert Fax: (250)387-5766
> Team Leader, Sun/DEC Team Internet: Cy.Schubertuumail.gov.bc.ca
> UNIX Group, ITSD, ISTA
> Province of BC
> "COBOL IS A WASTE OF CARDS."
>
> In message <200002231354.IAA06975bg-tc-ppp873.monmouth.com>, Bill
> Pechter writ
> es:
> > Dear sirs:
> >
> > I'd like to report what appears to be an attack on my machine.
> >
> > I picked up 6500 of these attempts ending when I dropped outside
> > connectivity at 8:34 this morning.
> >
> > This is a denial of service, since all my machine was doing was logging
> > these messages.
> >
> > This attack fully saturated my 33.6 ppp link.
> >
> > Bill Pechter
> > pechtermonmouth.com
> >
> >
> > ----- Forwarded message from The root of all evil -----
> >
> > >From root Wed Feb 23 04:59:32 2000
> > Date: Wed, 23 Feb 2000 04:59:23 -0500 (EST)
> > From: The root of all evil <root>
> > Message-Id: <200002230959.EAA65453bg-tc-ppp369.monmouth.com>
> > To: root
> > Subject: tcpd: unknownfes-d004.icq.aol.com[205.188.153.100] tried to use rpc
> > .rquotad (denied)
> >
> > [fes-d004.icq.aol.com]
> >
> >
> > ----- End of forwarded message from The root of all evil -----
> > bpechtermonmouth.com | Microsoft: Where do you want to go today?
> > | Linux: Where do you want to go tomorrow?
> > | BSD: Are you guys coming, or what?
> >
> >
> > To Unsubscribe: send mail to majordomoFreeBSD.org
> > with "unsubscribe freebsd-security" in the body of the message
>
> To Unsubscribe: send mail to majordomoFreeBSD.org
> with "unsubscribe freebsd-security" in the body of the message

-- 
Tom Brown
---------

To Unsubscribe: send mail to majordomoFreeBSD.org with "unsubscribe freebsd-security" in the body of the message