Skip site navigation (1)Skip section navigation (2)
Date:      Thu, 24 Feb 2000 01:50:13 -0800
From:      Cy Schubert <cschuber@uumail.gov.bc.ca>
To:        tomb <tomb@cgf.net>
Cc:        Cy Schubert - ITSD Open Systems Group <Cy.Schubert@uumail.gov.bc.ca>, freebsd-security@freebsd.org
Subject:   Re: Denial of Service.... anyone else see this attempt. 
Message-ID:  <200002241011.CAA06428@passer.osg.gov.bc.ca>
In-Reply-To: Your message of "Wed, 23 Feb 2000 16:55:22 PST." <38B4817A.E97174EE@cgf.net> 

next in thread | previous in thread | raw e-mail | index | archive | help
Since you're interested Denial of Service attacks, you might be 
interested in this too.  I just got port scanned on ports 119 and 25.

My point is that this and the previous posting about a DDoS have 
nothing to do with FreeBSD.  Unless either of these has anything to do 
with FreeBSD specifically, e.g. FreeBSD vulnerability, securing 
FreeBSD, it shouldn't be here.  Port scans and DDoS attacks should go 
to the appropriate mailing list.


Regards,                       Phone:  (250)387-8437
Cy Schubert                      Fax:  (250)387-5766
Team Leader, Sun/DEC Team   Internet:  Cy.Schubert@uumail.gov.bc.ca
UNIX Group, ITSD, ISTA
Province of BC            
                    "COBOL IS A WASTE OF CARDS."

In message <38B4817A.E97174EE@cgf.net>, tomb writes:
> I totally disagree as long as the machine in question is a FreeBSD box. 
> Although there is very little we can do to prevent this kind of
> activity. The information IS of interest.  If nothing else provides us
> us with stat's on who's doing what and where. 
> 
> The last thing we should be doing is discouraging people from sending
> information relating to FreeBSD security.  
> 
> If it seem's like it belongs on a different list then post it on and
> politely re-direct the initator to that list.  
> 
> Tom
> 
> 
> Cy Schubert - ITSD Open Systems Group wrote:
> > 
> > I'd like to say to all on this list that this type of message should
> > probably not be posted here on FreeBSD-Security.  INCIDENTS@securityfocu
> > s.com is a better place for this.  They discuss this and many other
> > types of incidents.
> > 
> > Regards,                       Phone:  (250)387-8437
> > Cy Schubert                      Fax:  (250)387-5766
> > Team Leader, Sun/DEC Team   Internet:  Cy.Schubert@uumail.gov.bc.ca
> > UNIX Group, ITSD, ISTA
> > Province of BC
> >                     "COBOL IS A WASTE OF CARDS."
> > 
> > In message <200002231354.IAA06975@bg-tc-ppp873.monmouth.com>, Bill
> > Pechter writ
> > es:
> > > Dear sirs:
> > >
> > > I'd like to report what appears to be an attack on my machine.
> > >
> > > I picked up 6500 of these attempts ending when I dropped outside
> > > connectivity at 8:34 this morning.
> > >
> > > This is a denial of service, since all my machine was doing  was logging
> > > these messages.
> > >
> > > This attack fully saturated my 33.6 ppp link.
> > >
> > > Bill Pechter
> > > pechter@monmouth.com
> > >
> > >
> > > ----- Forwarded message from The root of all evil -----
> > >
> > > >From root Wed Feb 23 04:59:32 2000
> > > Date: Wed, 23 Feb 2000 04:59:23 -0500 (EST)
> > > From: The root of all evil <root>
> > > Message-Id: <200002230959.EAA65453@bg-tc-ppp369.monmouth.com>
> > > To: root
> > > Subject: tcpd: unknown@fes-d004.icq.aol.com[205.188.153.100] tried to use
>  rpc
> > > .rquotad  (denied)
> > >
> > > [fes-d004.icq.aol.com]
> > >
> > >
> > > ----- End of forwarded message from The root of all evil -----
> > > bpechter@monmouth.com      |     Microsoft: Where do you want to go today
> ?
> > >                            |     Linux:     Where do you want to go tomor
> row?
> > >                            |     BSD:       Are you guys coming, or what?
> > >
> > >
> > > To Unsubscribe: send mail to majordomo@FreeBSD.org
> > > with "unsubscribe freebsd-security" in the body of the message
> > 
> > To Unsubscribe: send mail to majordomo@FreeBSD.org
> > with "unsubscribe freebsd-security" in the body of the message
> 
> -- 
> Tom Brown
> ---------




To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-security" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?200002241011.CAA06428>