Skip site navigation (1)Skip section navigation (2)
Date:      Mon, 23 Jun 1997 10:04:05 -0500
From:      Edwin Culp <eculp@emprende.net.mx>
To:        spork <spork@super-g.com>
Cc:        chas <sweeting@tm.net.my>, freebsd-isp@FreeBSD.ORG
Subject:   Re: duplicate IP = security problem ?
Message-ID:  <33AE9065.D8C0E83@mexcom.net>
References:  <Pine.BSF.3.95q.970622202913.12939B-100000@super-g.inch.com>

index | next in thread | previous in thread | raw e-mail

[-- Attachment #1 --]
spork wrote:
> 
> >
> > ---------------------------------------------------------------
> >
> > So, my questions are :
> >
> > 1) Could it be possible for someone to be using our IP ?
> >    And hence be on our network ?
> > 2) What could I do if this happens again to gain control
> >    of the IP again ?
> > 3) Any other explanations or advice ?
> >
> > Thank you very much.
> >
> > chas
> >
I'm attaching a c program that is supposed to spoof your name server
and temporarily substitute it.  I have only scanned the code but
the concept is interesting.  

I had this and the the package that goes with the README.gz (second
attachment) dumped on one of my linux machines in an attempt to do
something that I probably wouldn't have liked. :-)

I think these are worth looking at.  

Ed

[-- Attachment #2 --]
3jizz.cZmw84c3̙e](xFVZ:o{bK·Zl깯ҕ&%N.*fIv~.i{$)	%91z1SRsFXYB,$$8b̋IxI6I1B~MѩdJ+E%t/@%ɚ
A'ɹhtY8MhdF/j2eX-&y
`$izMx"x<edNy@(hs΄Vk%dEJ<DH"$:XhOe5c9`I$^NTP1,
I)U/#)Ra;žyL4Y4%OHa0fQ]U<_FJLs.Ke\awd΁2`1~sJN_2͋:؛iLP x+V^t|FK<L
3ػwݿdI)$gOdHJ#rq`^{e>`c{$cfL%U6Bș@F^
ѿ߹svzu?99:VaΆuF'VWz6znNɱytua}.F/N+o{gy;@B/&Bfa99|<@J}2?,f{mdKx$fecoeل
 CzŔ8ҕt!@D$B+ƛNzhE^i'ޠiY@bgds=V-rtmAj,AU!Q6)V%,x2j?-GY&p|̵k%MR
hUm0	dT1hڮ\?/!߰Ҳ4eĖʖ&~>Ia9s;2ix1u»a)u%3=(^G	_l-+nSRhmh(!r21&Tk(
ڠy,5Va{@ad#R^Igܫis^tESRJ>cWK?	pYjШY2WJa{Lsrz$Ue_Ӎ.Kc5trL~gK|
{O~^`!r'O>7R}@RiD/Ă#zpoۗ/uBWW8Fu;u.go^	GNw`ދ2J-1&m+vȝ_"4z!<'y$UTn6jMuLFuKolxw99]nڣѴ<MD<:U?")oڊrl2ET/$Ɍ+VELܱ把^@ћ^b}oQaEh["(}vꉤwپz=1|%9ut8EpO򹘋YMp}ɤLTS2B$)'MeM{-EתTƒ	UO*riLc_#A"s	UE}vv>FJ/&(m"0|r=u>*&U+λbz52JY@FzXȳԣ"O=DڳdMu4ϼP Ѩ%
nFpp݀24 uj`QpDFi";M3zS-o"2C1rȹb=d5[YCŲQ'%rNFVP~Z@׫w_֫w[rĥduRf_b\zfq+_A׫|bvIR<autjHX1cJ_e~ia»ȱ0"4ֻJ<=\o3ez0
o
f
`PTX2U2	L[e15njp:
!v®޴5s|!#KEaϮ
3M`]!,nPG<eY"_Ȥ(SиEPcvT
5GZbz.~YUon_5'gհE?E]?EP!ìRE$YŅ 6~DL(6{ʪ[< ӊav(x@nS 5M	)VmS/O~)o8M:ܝ+_~W=FhN|,|kLy>Gp;!D}|vy (?K2RR5.ئI3$Aȕ]ri6yzQfiwqMC}H̓',//:tJ>YSXKЩ׳WMYI!I7(wW"P3sM1ڿ_]1	"/'t2crf!kPPh52 RGgo"]="=&2`2SֿzIϕʘTz+6<&򢇕x&rHT02)^:IvՕ.z-8$|WkB7}[*쬼)pR)k{~=脽GaFx0W@+8ML<[%dI>e++
Sėtz*n?셏nFsqQa
,[
'M$s+J؊4WBuN:ٳ>Br'5NWל(ހ۰fk{ۼ0m`w+̫~p17s_⌒
g+7>Xbݿ5奙y9
ӻw;zNji͠h6Pٳ.Bj`ዳӀ?oH=|
XGQ,i.E읔'5TEFd2'nj#V
GnﻰZLux]haB/qWDnsY8EuDsiFp&W:Lukb]I{_׫fovMvY֯y~rIX :P78Xetɇo}K,(.WF7!*+jU!
ݽL	;̝ <d[
K(t N
л׮zQҵ%?}U㰣l8)0"?!,T1-X,C’V1WL\b\8_@^Am]v+t]F;w xeXN.[!+:ӬE?|t34nltCtJy><#4>$T* mz;nU`I<Ua^S'|=<p>qVLy9k:6
Iye
4VՏĻN
@W~*p?Iyrdj
OfA7؇JƀAwvp^1I!YN.v*<R%^Z?IsWk
?uZ~:-ґC3>sLKđSEG]ҪEƄr
[ϚȭI&n4]j	Z7<A$K%hSܥ 7f.s
_(y12
[-- Attachment #3 --]
`Cx1READMEYkSlIdq!b !*j,mŒFaD=1䱗h{y{_ɕKf0
ʪ0q-ǿ>|_׳g?\µW콦؎~fC+ʟ>Omfx'^
ƯG3k^k?]xa~|rJXr1O׫OLw,|⍵,z8TIbiw6;63<+;:]*leoϟyYMr$,N|	x;V
Dh4$)h6™J$-qS
M)T.GC1TLU1v%V4
t(өtBHUКJ+", .8ȣI$y2+*ȴQHF.d*EB
7ds4I>}5heAPPq\bwP5F)\u?:UIMODN&R$TiA{~RӴIJ؋7etX<'2	I<K4stZF0qϭi:%;ڙ^TO$H
88<^eBrHD6(ʄh qqOVHJ#aEԶzbuu̓zҺ8m!ES2-=h>bC.+szIu8G(
VhPq4SZE
m\?
WJ*ORxx;<Ns@hnUTxd%3+blt&*)~!f"e=KAfiH+ehp\8%d+©:Y4AV4BsqDR3kgW0,F4IcxÃ*zB.'cbڰAYB0¦H̹4*$Z
	%KrmNMs2Kؠ((<H8&	x:/uPf`y+K(*ǰwN&459!L󔌦
XB^E'-'}@&8o\D$cdyǀϟ({X)|CM6p&ZCM_A(\#XF0vfp*eK"P>`?VšS臼}]keO9,K-.%cQ.p(
=*n茼"(KuCqM	FKCurT@<5j[ĺF	"d/OUZZ~lԒ
Sq'\X:u;tvnڅ tbt{&l:Bιvn,X.V#ަg|t 3>-B=e-H	*XI>vKܩ]+*|``Vɘ{Hj#Âg'GrC8ߧtJ\fc=Pdn2(Wc_.MziʹYQ7͆$CG[@غ)5VqU#,Gq3`.*Pvj]o
ߥ.Ӳ=E!͟ݝpA2lUgYG,"~KD-Ա|M۔7rzOS,ui
UafJ]U'$7rld
i%F.SqQ/jeD),Iem([OPHoG|[Ռ)h>`<N6#QW0,sQM?7/"Y!{eq0eC0)=uQt9mMs̶Y~R[R/P@5Iti1)1xh|vSO]1"\XaP6^^8ykjQmq!FmFKަT*y1hc}tPOꌭ2yJ4s^7uk7cd4DR:cr`z'9
"0m4rusp	9h=P ljJ[
ԍ+o
*dt3,y•{4dw$:/Bu8OvY7zuPp#(>F'tɑ;
5i~˖ ơf'edodt}Y@^a%ϘĐƖT;RR$.<@ӞzLqx,=.S(4ԏaUIkJ<*
<Lr?xE8,O+K+CHq g~fE[Y[@dr/2djc9@=b2!fNW,x~Cg@2j]uC]LRcsG#83Ut'hg9%ࣩfpXg~"pRcӈ"-B`TRrkЄYWoP>Chb$)(1Vi߇L=}<pmeI}	R,1b&lQ͆G#)
k
ɢPv</61>\2ͳ&_[|rwku"Sq[lo}C֠HZu*dZf3J;
0;Z\OjiD)&YJn"ꃞ7?`\DIze˜VYMA6#<r_0<8&30ϐwLrC y~ɰjHvOhzqāhV%8V3Pjp$nn0g'ogbx~M0'.-!+({pJ
F璚\nlmW("'a҈(LiPEd~I;mA3VgWbpD#4_[h^`p,NN`__Ów\vAqnewho~RmmÛѻ=szyd'Zwvn.i0t33g՞]~I񪼓/;:ov.W[n^v>ͻ9o ?ogNѫVΛ8{ӫq/N?Nqsc`;.Z+4>Hmyuwt픇^:.;tt+6ł};$/wSv5vnא=W
Nj<,A$D2OnÉR!Gz%/l0NO,,6!;*h-6’:_ L1CqJ*V?
jRz#Miάn~5׹V(#G`1:^\CQ@g:kpj_Ly5
t:|ݔWq[[P]A4%I}b;r
help

Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?33AE9065.D8C0E83>