From owner-freebsd-questions Sun Jun 24 19:29:26 2001 Delivered-To: freebsd-questions@freebsd.org Received: from nebula.anchoragerescue.org (cable-115-7-237-24.anchorageak.net [24.237.7.115]) by hub.freebsd.org (Postfix) with ESMTP id 262B537B406 for ; Sun, 24 Jun 2001 19:29:21 -0700 (PDT) (envelope-from akbeech@anchoragerescue.org) Received: from galaxy.anchoragerescue.org (galaxy.anchoragerescue.org [24.237.7.95]) by nebula.anchoragerescue.org (Postfix) with SMTP id E11F6E3; Sun, 24 Jun 2001 18:29:19 -0800 (AKDT) Content-Type: text/plain; charset="iso-8859-1" From: Beech Rintoul To: tyler spivey , freebsd-questions@freebsd.org Subject: Re: attacks Date: Sun, 24 Jun 2001 18:29:19 -0800 X-Mailer: KMail [version 1.2] References: <200106242210.f5OMARQ34434@home.com> In-Reply-To: <200106242210.f5OMARQ34434@home.com> MIME-Version: 1.0 Message-Id: <01062418291900.28112@galaxy.anchoragerescue.org> Content-Transfer-Encoding: 8bit Sender: owner-freebsd-questions@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.ORG On Sunday 24 June 2001 14:10, tyler spivey wrote: > i just got another rpc.statd attack. what is up wtih that? > > To Unsubscribe: send mail to majordomo@FreeBSD.org > with "unsubscribe freebsd-questions" in the body of the message This question comes up regularly. The attack in question is an old Linux overflow script. It has never affected FreeBSD, and no longer works on Linux. Script kiddies still run it, and at worst it's an annoyance. But you should also not be running rpc on an external interface. If you don't have one already, a good firewall will solve this problem. Beech -- Micro$oft: "Where can we make you go today?" ------------------------------------------------------------------- Beech Rintoul - IT Manager - Instructor - akbeech@anchoragerescue.org /"\ ASCII Ribbon Campaign | Anchorage Gospel Rescue Mission \ / - NO HTML/RTF in e-mail | P.O. Box 230510 X - NO Word docs in e-mail | Anchorage, AK 99523-0510 / \ ----------------------------------------------------------------- To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-questions" in the body of the message