Skip site navigation (1)Skip section navigation (2)
Date:      Wed, 12 Sep 2001 15:01:07 -0500
From:      "David W. Chapman Jr." <dwcjr@inethouston.net>
To:        Jim Bryant <kc5vdj@yahoo.com>
Cc:        "P. U. (Uli) Kruppa" <root@pukruppa.de>, freebsd-questions@FreeBSD.ORG
Subject:   Re: anonymous-ftp cracked
Message-ID:  <20010912150106.C57316@leviathan.inethouston.net>
In-Reply-To: <3B9FA363.3020308@yahoo.com>
References:  <20010912174347.Q1009-100000@pukruppa.de> <3B9FA363.3020308@yahoo.com>

next in thread | previous in thread | raw e-mail | index | archive | help
On Wed, Sep 12, 2001 at 01:03:15PM -0500, Jim Bryant wrote:
> This doesn't indicate that you were cracked if it was anonymous FTP.
> 
> You may have been scanned for open ports, and it appears that they took 
> advantage of your FTP being open.
> 
> Set up logging via the inetd.conf line (man ftpd for options).  Then you can 
> at least use ipf or ipfw to ban the domains that were involved.
> 

That will stop them from that site, but you'll end up banning most 
major isp's.  I constantly have these directories and the only way I 
could stop it was denying read access to incoming folder.  Dump sites 
aren't any use to warez traffic'ers if nobody can download from them.

-- 
David W. Chapman Jr.
dwcjr@inethouston.net	Raintree Network Services, Inc. <www.inethouston.net>
dwcjr@freebsd.org	FreeBSD Committer <www.FreeBSD.org>

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-questions" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20010912150106.C57316>