From owner-freebsd-questions Wed Nov 28 17:41:29 2001 Delivered-To: freebsd-questions@freebsd.org Received: from lists.blarg.net (lists.blarg.net [206.124.128.17]) by hub.freebsd.org (Postfix) with ESMTP id A248B37B41A for ; Wed, 28 Nov 2001 17:41:25 -0800 (PST) Received: from thig.blarg.net (thig.blarg.net [206.124.128.18]) by lists.blarg.net (Postfix) with ESMTP id 085BABD20; Wed, 28 Nov 2001 17:41:25 -0800 (PST) Received: from localhost.localdomain ([206.124.139.115]) by thig.blarg.net (8.9.3/8.9.3) with ESMTP id RAA02920; Wed, 28 Nov 2001 17:41:24 -0800 Received: (from jojo@localhost) by localhost.localdomain (8.11.6/8.11.3) id fAT1cdQ11481; Wed, 28 Nov 2001 17:38:39 -0800 (PST) (envelope-from swear@blarg.net) To: Kent Stewart Cc: freebsd-questions@FreeBSD.ORG Subject: Re: script-kiddie trap? References: <20011128230524.14004.qmail@web20105.mail.yahoo.com> <3C056FD4.8@owt.com> From: swear@blarg.net (Gary W. Swearingen) Date: 28 Nov 2001 17:38:38 -0800 In-Reply-To: <3C056FD4.8@owt.com> Message-ID: Lines: 16 User-Agent: Gnus/5.0808 (Gnus v5.8.8) XEmacs/21.1 (Cuyahoga Valley) MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Sender: owner-freebsd-questions@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.ORG Kent Stewart writes: > ... The ipfw (firewall) logs are > good enough for most ISPs. I get a lot of double tries and I toss a > coin, i.e., do I report them or not. I report all attempts with more > than two tries. Nice to know. Thanks. I'd like to see an article which addressed those sort of issues. There's plenty on how to stop bad guys and how to detect them, but I've seen very little on how to punish them. Practical things. Just ISP? FBI? Local police? Always E-mail, or phone call? Probability of bad guy retaliating? Probability of having to go to court? What are common ISP/FBI/cop reactions to complaints? Many first-hand stories would be good. To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-questions" in the body of the message