From owner-freebsd-questions Fri Nov 12 5:54: 0 1999 Delivered-To: freebsd-questions@freebsd.org Received: from spits.calcasieu.com (spits.calcasieu.com [209.99.46.70]) by hub.freebsd.org (Postfix) with ESMTP id 3213914E2A for ; Fri, 12 Nov 1999 05:53:52 -0800 (PST) (envelope-from dread@calcasieu.com) Received: from coypu.bb.calcasieu.com (coypu.bb.calcasieu.com [192.168.3.21]) by spits.calcasieu.com (8.9.3/8.9.3) with ESMTP id HAA49490; Fri, 12 Nov 1999 07:53:23 -0600 (CST) (envelope-from dread@calcasieu.com) Message-ID: X-Mailer: XFMail 1.3.1 [p0] on FreeBSD X-Priority: 3 (Normal) Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: 8bit MIME-Version: 1.0 In-Reply-To: <9911120731257C.11943@weba4.iname.net> Date: Fri, 12 Nov 1999 07:53:22 -0600 (CST) Organization: Calcasieu Lumber From: Don Read To: os2_daemon@altavista.net Subject: RE: FreeBSD security on TCP/IP question. Cc: freebsd-questions@FreeBSD.ORG Sender: owner-freebsd-questions@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.ORG On 12-Nov-99 os2_daemon@altavista.net wrote: > Hello, > I've just ran into trouble for mucking around with ifconfig and conflicting > IP addresses. I'm just an ordinary user without any deep TCP/IP knowledge. ah... mucking about. ... and not even your network. > > It all started when curiously, I tried to put 172.16.1.1 which is an NT > server into ifconfig. Ifconfig said some error messages that the IP address > have been taken by another machine. Who cares ... > just the rest of the 172.16 network. > Next day, the sysadmin came to me and accusing me for trying to hijack the > system. He told me that apparently I crashed his NT by doing so. This brought > me a very big question. Was he just bluffing, or the NT seriously cannot > defend against this ? I've never seen NT fall-over from this; it's lame, but not that fscking lame. usually it stopps accepting or sending packets for various intervals and give a whinging dialog. > Could please anyone explain what had happened in detail? http://oac3.hsc.uth.tmc.edu/staff/snewton/tcp-tutorial/ > I've heard of something called "IP spoofing", is this one of them ? different kind of spoof. > I also wonder what will happen to a FreeBSD box if some other computer claim > the same IP address. pretty much the same, stop accepting or transmitting packets, and complain loudly. -- Don (unplug 'em) Read dread@calcasieu.com EDP Manager dread@texas.net Calcasieu Lumber Co. Austin TX -- For the same reason you don't give handguns to children. To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-questions" in the body of the message