From owner-freebsd-questions  Thu Jul 12 12: 8: 2 2001
Delivered-To: freebsd-questions@freebsd.org
Received: from hamster.franken.de (hamster.franken.de [193.141.110.13])
	by hub.freebsd.org (Postfix) with ESMTP id 98D2537B405
	for <questions@FreeBSD.ORG>; Thu, 12 Jul 2001 12:07:55 -0700 (PDT)
	(envelope-from tanis@gaspode.franken.de)
Received: from karnickel.franken.de (karnickel.franken.de [193.141.110.11])
	by hamster.franken.de (8.11.1/8.11.1) with ESMTP id f6CJ7no81028;
	Thu, 12 Jul 2001 21:07:49 +0200 (CEST)
	(envelope-from tanis@gaspode.franken.de)
Received: from gaspode.franken.de (lengfeld.core.main.franken.de [193.141.110.4])
	by karnickel.franken.de (8.11.3/8.11.3) with ESMTP id f6CJ7ns00545;
	Thu, 12 Jul 2001 21:07:49 +0200 (CEST)
	(envelope-from tanis@gaspode.franken.de)
Received: (from tanis@localhost)
	by gaspode.franken.de (8.11.3/8.11.1) id f6CJ7nr03851;
	Thu, 12 Jul 2001 21:07:49 +0200 (CEST)
	(envelope-from tanis)
Date: Thu, 12 Jul 2001 21:07:49 +0200
From: German Tischler <tanis@gaspode.franken.de>
To: andy t <g_et1@hotmail.com>
Cc: questions@FreeBSD.ORG
Subject: Re: block hacker ?
Message-ID: <20010712210749.A3815@gaspode.franken.de>
References: <F307ZLEZF98vvwNeZsj00014b59@hotmail.com>
Mime-Version: 1.0
Content-Type: multipart/signed; micalg=pgp-md5;
	protocol="application/pgp-signature"; boundary="u3/rZRmxL6MmkK24"
Content-Disposition: inline
User-Agent: Mutt/1.2.5-current-20010403i
In-Reply-To: <F307ZLEZF98vvwNeZsj00014b59@hotmail.com>; from g_et1@hotmail.com on Thu, Jul 12, 2001 at 06:55:51PM -0000
Sender: owner-freebsd-questions@FreeBSD.ORG
Precedence: bulk
List-ID: <freebsd-questions.FreeBSD.ORG>
List-Archive: <http://docs.freebsd.org/mail/> (Web Archive)
List-Help: <mailto:majordomo@FreeBSD.ORG?subject=help> (List Instructions)
List-Subscribe: <mailto:majordomo@FreeBSD.ORG?subject=subscribe%20freebsd-questions>
List-Unsubscribe: <mailto:majordomo@FreeBSD.ORG?subject=unsubscribe%20freebsd-questions>
X-Loop: FreeBSD.ORG


--u3/rZRmxL6MmkK24
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable

On Thu, Jul 12, 2001 at 06:55:51PM -0000, andy t wrote:
>=20
> someone with ip: 217.85.114.188 hostname: pD95572BC.dip.t-dialin.net trie=
d=20
> to hack my box.
>=20
> how do i block him ? <ignore any connection from that ip> ?

As this is apparently a dynamically allocated dialup address,
blocking the IP probably won't help you.
Maybe it is a good idea to start with a "default to deny" firwall
and then open what you need.

If you still want to do the above

	ipfw add deny ip from 217.85.114.188 to <yourip>

would do that.

You should also check if you have any useless services running on
your machine.

--gt

--u3/rZRmxL6MmkK24
Content-Type: application/pgp-signature
Content-Disposition: inline

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.0.6 (FreeBSD)
Comment: For info see http://www.gnupg.org

iQEVAwUBO031hL7hO6NLB/FvAQHjiwgAvdwfrg9geL8ldMfWc93HbBaSjeZ0ujun
zih0vP9lt7k6WCa2ej5guXIDU+tkeKM3o3BndxPIU5yMZpehuaOae/AhbCHamiPc
HGj6QonDkJCsXAhXZGNou5Ebfl+ryjbLeKhw0nTvsHIwaL/7+yFjFk8YVc8zb2Tf
ElQoqE/9qlhHQbA9T4mWDhpiFtxma7v5XmaseoOxREhOCRaxUAbuuU5UouMntV3I
kFnS/A8wqxKqb5rjfFJm3lB8pf9HqBEJyKuRgmlxgG3aMy0nocpI2wJQ6m3/pKLx
li6l1f1zT9lGTTE6zYnAKLOSpsxcb3CuRWO/W7nmpLiH+YtP3uQKPA==
=CIR/
-----END PGP SIGNATURE-----

--u3/rZRmxL6MmkK24--

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-questions" in the body of the message