From owner-freebsd-questions@FreeBSD.ORG  Sat Jun  5 06:22:30 2004
Return-Path: <owner-freebsd-questions@FreeBSD.ORG>
Delivered-To: freebsd-questions@freebsd.org
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP id 49E9B16A4CE
	for <freebsd-questions@freebsd.org>;
	Sat,  5 Jun 2004 06:22:30 -0700 (PDT)
Received: from wonkity.com (wonkity.com [65.173.111.5])
	by mx1.FreeBSD.org (Postfix) with ESMTP id E75C943D4C
	for <freebsd-questions@freebsd.org>;
	Sat,  5 Jun 2004 06:22:29 -0700 (PDT)
	(envelope-from wblock@wonkity.com)
Received: from wonkity.com (localhost [127.0.0.1])
	by wonkity.com (8.12.11/8.12.11) with ESMTP id i55DMIsk024446;
	Sat, 5 Jun 2004 07:22:18 -0600 (MDT)
	(envelope-from wblock@wonkity.com)
Received: from localhost (wblock@localhost)
	by wonkity.com (8.12.11/8.12.11/Submit) with ESMTP id i55DMHqG024443;
	Sat, 5 Jun 2004 07:22:18 -0600 (MDT)
	(envelope-from wblock@wonkity.com)
Date: Sat, 5 Jun 2004 07:22:17 -0600 (MDT)
From: Warren Block <wblock@wonkity.com>
To: Hasse <hasse@swedehost.com>
In-Reply-To: <200406051425.49401.hasse@swedehost.com>
Message-ID: <20040605071847.A24374@wonkity.com>
References: <200406051425.49401.hasse@swedehost.com>
MIME-Version: 1.0
Content-Type: TEXT/PLAIN; charset=US-ASCII; format=flowed
cc: FreeBSD_Questions <freebsd-questions@freebsd.org>
Subject: Re: Sending a message to another computer on the network
X-BeenThere: freebsd-questions@freebsd.org
X-Mailman-Version: 2.1.1
Precedence: list
List-Id: User questions <freebsd-questions.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-questions>,
	<mailto:freebsd-questions-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-questions>
List-Post: <mailto:freebsd-questions@freebsd.org>
List-Help: <mailto:freebsd-questions-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-questions>,
	<mailto:freebsd-questions-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Sat, 05 Jun 2004 13:22:30 -0000

On Sat, 5 Jun 2004, Hasse wrote:

> I'm on a FreeBSD 4.10-STABLE machine on 217.209.211.x ,
> and would like to send a message to Win-box ( on the same network, but not my
> machine ) that's filling up my  httpd-access.log with junk.
> The only thing I know is his IP-adress.
> Is this possible ? If it is, how.
> Or do I have to block his IP ?

>From the log you posted, it looks like it's trying to attack your web 
server with a buffer overflow.  Probably this is a compromised Windows 
machine, and the owner isn't aware it's doing this, but either way, you 
should contact your ISP.  Telia doesn't seem to be very different from 
most larger ISPs, and they may not react quickly or at all.  You could 
also try using smbclient (part of the Samba port) to send a Windows 
popup message to that machine.

-Warren Block * Rapid City, South Dakota USA