if someone was trying to exploit your machine, wouldn't you want to know
where they were doing it from, especially wrt inside or outside the network?

:-----Original Message-----
:From: Will Andrews [mailto:willphysics.purdue.edu]
:Sent: March 8, 2001 09:41 AM
:To: Will Mitayai Keeso Rowe
:Cc: tjktksoft.com; Will Mitayai Keeso Rowe; willphysics.purdue.edu;
:freebsd-securityFreeBSD.ORG
:Subject: Re: strange messages
:
:
:On Thu, Mar 08, 2001 at 09:33:30AM -0500, Will Mitayai Keeso Rowe wrote:
:> Acording to CERT (the latest statd message seems to be
:> http://www.kb.cert.org/vuls/id/34043)
:> FreeBSD is not vulnerable to rpc.statd problems.
:>
:> But, i still have a question... how can i better log attempts to hack my
:> machine's rpc.statd? It would be nice to have an IP of the
:connecting box so
:> i can see if they are doing it remotely or by an account on my machine.
:
:Tcpwrappers or ipfw? What good is this information?
:
:--
:wca
:

To Unsubscribe: send mail to majordomoFreeBSD.org
with "unsubscribe freebsd-security" in the body of the message

• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]