Date: Wed, 04 Apr 2001 18:22:03 +1000 From: Kal Torak <kaltorak@quake.com.au> To: Enno Davids <enno.davids@metva.com.au> Cc: freebsd-isp@FreeBSD.ORG Subject: Re: Chasing the kiddies (was: Named Keep crashing) Message-ID: <3ACAD9AB.77D6C02@quake.com.au> References: <200104040745.RAA08839@metva.com.au>
next in thread | previous in thread | raw e-mail | index | archive | help
Enno Davids wrote: > > | > > | > Is there any way to trace who is doing it? > | > Running tcpdump with certain filter settings to avoid logging everything and > filling the disk? > | > > | > | Dont bother... Just install the fixed version of bind... > | Every kid with a script and an internet connection is probably > | doing this to you!!! > | > > This response kind of bothers me. There was a time when everytime I could > sanely trace spammers I emailed abuse@wherever.was.relevant to advise them. > Similarly, when people probed Apache I'd send off adivsory emails. > > But only last weekend as I watched yet another clown with a cable modem > perform the 1/2 hourly scan of my network for open RPC ports I wondered why > I (and I presume others) were no longer doing this. Clearly the sheer volume > of morons is one reason. Is anyone still doing this and getting satisfaction? Well, there is that.. and the fact that they really dont do any harm most of the time... I am of the opinion that people can scan and probe all they like, it should be the admins that cant secure there systems that get advisory emails! There are plenty of people still sending mail off to abuse@blah, most of which use automated systems, and the people @blah get annoyed or dont care... By sending polite personalised mail to abuse I have got plenty of nice helpfull responses.. But again if some kid can DoS your server, it you that should be getting the slap on the wrist! > There was a time when if you probed the Apache on my machine it winnuke'd > you back. Moral issues aside, there _was_ a great deal of satisfaction > there... Needless to say, there's little mileage in this now (damned M$ > service packs!). :) There are still plenty of bugs in IE that will crash those systems, and worse, Mwahaha :P To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-isp" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?3ACAD9AB.77D6C02>