Security Incidents mailing list archives
Re: @home: Is *anyone* really home there???
From: judeb () TECHEMAIL COM (Jude)
Date: Fri, 3 Mar 2000 14:41:12 -0800
"GAW" == Greg A Woods <woods () MOST WEIRD COM> writes:
GAW> I don't want to see any reports that simply mention an GAW> errant packet or two, regardless of what the packet GAW> destination port was. GAW> I do want to see reports of systematic and repeated GAW> attacks where a variety of types of attacks are in GAW> use, provided of course there's adequate documentation GAW> to demonstrate the persistence and variance of such GAW> annoyances. But we the subscribers don't know if the attacks are systematic and repeated. Only you the ISP can collect that data, and you can only collect it if subscribers report those annoying single packet probes. It is interesting to me that on the day after somebody posted to Bugtraq that single probes to port 25 were going to be ignored by ISPs, I detected a single probe scan of port 25 on an @Home machine. Of course, *I* don't know if the scan was systematic. _______________________________________________________ Are you a Techie? Get Your Free Tech Email Address Now! Many to choose from! Visit http://www.TechEmail.com
Current thread:
- Re: ingreslock message, (continued)
- Re: ingreslock message Dino Amato (Mar 07)
- Re: ingreslock message Robert Graham (Mar 07)
- firewall abusing Przemyslaw Frasunek (Mar 07)
- Re: ingreslock message H D Moore (Mar 07)
- Re: ingreslock message Eric Maiwald (Mar 07)
- Re: auto-reporting to ISPs John Nemeth (Mar 07)
- UDP flood 28001-28003 George (Mar 07)
- Re: ingreslock message Jens Hektor (Mar 09)
- Re: ingreslock message Ex Machina [xm] (Mar 13)
- Re: ingreslock message Jens Hektor (Mar 13)