OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
From: Valdis.Kletnieksvt.edu
Date: Thu Apr 04 2002 - 09:53:05 CST

  • Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

    On Wed, 03 Apr 2002 15:41:23 MST, Mike Lewinski <mikerockynet.com> said:

    > Since I am not a VPN expert, I'm wondering if anyone else can shed some
    > light on what might be going on here. Is this just a brain-dead VPN client
    > that's making bad assumptions about it's resolvers? Or is there something
    > more malicious going on? The traffic was picked up after a SYN flood to one
    > of the DNS servers led to further investigation.

    Been there, done that. Quite possibly a Windows box that has the little
    box checked for "Try to negotiate IPSec connection always" (am not a
    WIndows person, not sure exactly what it's labeled).

    -- 
    				Valdis Kletnieks
    				Computer Systems Senior Engineer
    				Virginia Tech
    

    -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.0.6 (GNU/Linux) Comment: Exmh version 2.5 07/13/2001

    iD8DBQE8rHbhcC3lWbTT17ARAuBwAJ9bZxwNeWEJPXDS0SqVEQNCKMKYMACg7tSd hggGBS8SA+5fMntqdJaS1tU= =bVHG -----END PGP SIGNATURE-----