From owner-freebsd-security Wed Aug 9 9:33:30 2000 Delivered-To: freebsd-security@freebsd.org Received: from relay3.san.cerf.net (relay3.san.cerf.net [192.215.81.76]) by hub.freebsd.org (Postfix) with ESMTP id 0596B37BE91 for ; Wed, 9 Aug 2000 09:33:23 -0700 (PDT) (envelope-from lwells@goalie-usa.com) Received: from penguin (host6.goalie-usa.com [12.17.221.245]) by relay3.san.cerf.net (8.9.3/8.9.3) with SMTP id QAA01405; Wed, 9 Aug 2000 16:33:18 GMT Message-ID: <002301c0021f$947f8240$2c0100c0@goalieusa.com> From: "Larry Wells" To: Cc: References: <20000809160822.I22672@pavilion.net> Subject: Re: who is port scanning at freebsd.org Date: Wed, 9 Aug 2000 10:33:41 -0600 Organization: Goalie Entertainment MIME-Version: 1.0 Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: 7bit X-Priority: 3 X-MSMail-Priority: Normal X-Mailer: Microsoft Outlook Express 5.50.4133.2400 X-MimeOLE: Produced By Microsoft MimeOLE V5.50.4133.2400 Sender: owner-freebsd-security@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.org > On Wed, Aug 09, 2000 at 10:02:34AM -0500, George.Giles@mcmail.vanderbilt.edu wrote: > > It is a port scan looking for smtpd. > I sincerely hope you are making a joke, George. #1: Your firewall won't tell you what someone is looking for if they are portscanning. #2: I'm guessing your 'smtpd' assumption is based on the fact that multiple attempts were made to connect to port 25 of some machine. #3: I think you have become a victim of the dread hacker program 'Sendmail'. The only remedy is to go buy a book on how networks work. L. Wells To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-security" in the body of the message