From owner-freebsd-security Mon Apr 19 11:56:50 1999 Delivered-To: freebsd-security@freebsd.org Received: from mozart.csl.cornell.edu (MOZART.CSL.CORNELL.EDU [132.236.71.20]) by hub.freebsd.org (Postfix) with ESMTP id 84B6E155C4 for ; Mon, 19 Apr 1999 11:56:44 -0700 (PDT) (envelope-from rajit@csl.cornell.edu) Received: from mozart.csl.cornell.edu (localhost [127.0.0.1]) by mozart.csl.cornell.edu (8.9.3/8.9.2) with ESMTP id OAA02778 for ; Mon, 19 Apr 1999 14:54:18 -0400 (EDT) (envelope-from rajit@mozart.csl.cornell.edu) Message-Id: <199904191854.OAA02778@mozart.csl.cornell.edu> To: security@FreeBSD.ORG Subject: Re: poink and freebsd In-reply-to: Your message of "Mon, 19 Apr 1999 11:54:21 MDT." Date: Mon, 19 Apr 1999 14:54:18 -0400 From: Rajit Manohar Sender: owner-freebsd-security@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.org Hi all, I just tested poink on FreeBSD 3.1-RELEASE, and the machine has a minor problem and then recovers. As people pointed out, arp is arp and it really shouldn't hose systems much. I haven't tried out extensive tests yet... maybe later in the evening when I have more time. :) Here's my log file: Apr 19 14:39:32 /kernel: arp: is using my IP address ! Apr 19 14:39:32 last message repeated 16 times Apr 19 14:39:32 /kernel: Apr 19 14:39:32 /kernel: arp: is using my IP address ! Apr 19 14:39:32 last message repeated 2 times ( -> your machine, -> your ethernet addr, -> your ip addr :) ) The next thing that happened was that ypbind complained for a bit (NIS server not responding) and amd was unhappy. The machine always responded to pings, but my home directory disappeared temporarily. In about a minute, everything returned to normal (AFAIK). I'd guess that a repeated-poink, or a poink of an nfs server would be a more serious problem. -Rajit To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-security" in the body of the message