OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
Subject: Re: Update 2: unrecognized: "???" with porcupine.org
From: Wietse Venema (wietseporcupine.org)
Date: Sun Mar 19 2000 - 15:29:48 CST

Lutz Jaenicke:
> On Sun, Mar 19, 2000 at 03:09:25PM -0500, Wietse Venema wrote:
> > All I have seen reported ON THIS LIST is crap in data SENT FROM a
> > Linux machine. See the initial posting in this "update 2" thread.
>
> Hmm, in the (malicious packet) tcpdump the packet is coming into Gerald's
> Linux host, it is not going out.

The SENDING machine runs Linux...

> > > (which is qmail on BSD), also the tcpdump I send last week contains the junk
> > > in the RCPT TO which (seems to be) is send by the client.

> > That's a Linux client: mailout01.sul.t-online.de.

> How did you find out?

nmap version 2.12 tols me, but it may be wrong.

        Wietse