From owner-freebsd-security  Tue Oct 13 13:59:45 1998
Return-Path: <owner-freebsd-security@FreeBSD.ORG>
Received: (from majordom@localhost)
          by hub.freebsd.org (8.8.8/8.8.8) id NAA22305
          for freebsd-security-outgoing; Tue, 13 Oct 1998 13:59:45 -0700 (PDT)
          (envelope-from owner-freebsd-security@FreeBSD.ORG)
Received: from shell6.ba.best.com (shell6.ba.best.com [206.184.139.137])
          by hub.freebsd.org (8.8.8/8.8.8) with ESMTP id NAA22282
          for <security@FreeBSD.ORG>; Tue, 13 Oct 1998 13:59:37 -0700 (PDT)
          (envelope-from jkb@shell6.ba.best.com)
Received: (from jkb@localhost)
	by shell6.ba.best.com (8.9.0/8.9.0/best.sh) id NAA25005;
	Tue, 13 Oct 1998 13:58:27 -0700 (PDT)
Message-ID: <19981013135826.A22942@best.com>
Date: Tue, 13 Oct 1998 13:58:26 -0700
From: "Jan B. Koum " <jkb@best.com>
To: Brett Glass <brett@lariat.org>
Cc: security@FreeBSD.ORG
Subject: Re: Spoofed connections on port 13223??
References: <Pine.BSF.3.96.981013004343.26044A-100000@ns.nternet.net> <199810131024.DAA04862@hub.freebsd.org> <4.1.19981013100624.041b8760@mail.lariat.org>
Mime-Version: 1.0
Content-Type: text/plain; charset=us-ascii
X-Mailer: Mutt 0.93.2i
In-Reply-To: <4.1.19981013100624.041b8760@mail.lariat.org>; from Brett Glass on Tue, Oct 13, 1998 at 10:06:58AM -0600
Sender: owner-freebsd-security@FreeBSD.ORG
Precedence: bulk
X-Loop: FreeBSD.org

On Tue, Oct 13, 1998 at 10:06:58AM -0600, Brett Glass <brett@lariat.org> wrote:
> CERT? Don't bother. They'll respond several months after it's too late
> and say, "Oh, dear."
> 
> --Brett
> 
> 
> At 08:23 PM 10/13/98 +1000, Darren Reed wrote:
>  
> >People, I can understand wanting to bring it to an informal forum, but
> >if you seriously think you are under attack then you should contact the
> >relevant CERT and talk with them about it.  It may be that what you're
> >seeing is part of a "bigger picture" that you can't see.
> >
> >Darren
> 
> 
> To Unsubscribe: send mail to majordomo@FreeBSD.org
> with "unsubscribe freebsd-security" in the body of the message

        I think what Darren was refering to was a situation where an attack
        means nothing to you, but if you contact CERT, they would say: Ohh
        yeah, we had another 239 calls - this is a large scale attack.

        However, I never delt with CERT and not really sure how things work
        when someone calls them.

-- Yan

I don't have the password .... + Jan Koum 
But the path is chainlinked .. | Spelled Jan, pronounced Yan. There. 
So if you've got the time .... | Web: http://www.best.com/~jkb
Set the tone to sync ......... + OS: http://www.FreeBSD.org

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-security" in the body of the message