Security Incidents mailing list archives

Re: @home: Is *anyone* really home there???


From: judeb () TECHEMAIL COM (Jude)
Date: Fri, 3 Mar 2000 14:41:12 -0800


"GAW" == Greg A Woods <woods () MOST WEIRD COM> writes:

GAW> I don't want to see any reports that simply mention an
GAW> errant packet or two, regardless of what the packet
GAW> destination port was.

GAW> I do want to see reports of systematic and repeated
GAW> attacks where a variety of types of attacks are in
GAW> use, provided of course there's adequate documentation
GAW> to demonstrate the persistence and variance of such
GAW> annoyances.

But we the subscribers don't know if the attacks are systematic
and repeated.  Only you the ISP can collect that data, and you
can only collect it if subscribers report those annoying single
packet probes.

It is interesting to me that on the day after somebody
posted to Bugtraq that single probes to port 25 were
going to be ignored by ISPs, I detected a single probe scan
of port 25 on an @Home machine.  Of course, *I* don't know
if the scan was systematic.

_______________________________________________________
Are you a Techie? Get Your Free Tech Email Address Now!
Many to choose from! Visit http://www.TechEmail.com


Current thread: