Re: scans on ports 3072 and 1024, why?

[Aaron Schultz <aaron () POWERTRIP NET>]

Update on the DALnet related "scans" people are seeing:

If you are seeing only random RST packets from DALnet it is probably due
to the attacks on DALnet, not DALnet attacking you.  One of the styles of
attacks we've been seeing are ACK floods from random spoofed IPs.  The
result of the attacks: your machines on the legit IPs are getting the RST
response packets.  Unfortunately logs for this won't be much help.

We are still interested in any other reports of activity regarding the
DALnet servers.

- Aaron Schultz
- aaron () powertrip net
------