From owner-freebsd-security  Tue Oct 13 17:52:29 1998
Return-Path: <owner-freebsd-security@FreeBSD.ORG>
Received: (from majordom@localhost)
          by hub.freebsd.org (8.8.8/8.8.8) id RAA04608
          for freebsd-security-outgoing; Tue, 13 Oct 1998 17:52:29 -0700 (PDT)
          (envelope-from owner-freebsd-security@FreeBSD.ORG)
Received: from lariat.lariat.org (lariat.lariat.org [206.100.185.2])
          by hub.freebsd.org (8.8.8/8.8.8) with ESMTP id RAA04596
          for <security@FreeBSD.ORG>; Tue, 13 Oct 1998 17:52:18 -0700 (PDT)
          (envelope-from brett@lariat.org)
Received: (from brett@localhost)
	by lariat.lariat.org (8.8.8/8.8.6) id SAA24971;
	Tue, 13 Oct 1998 18:51:55 -0600 (MDT)
Message-Id: <4.1.19981013184727.00c3a620@mail.lariat.org>
X-Sender: brett@mail.lariat.org
X-Mailer: QUALCOMM Windows Eudora Pro Version 4.1 
Date: Tue, 13 Oct 1998 18:48:56 -0600
To: Jay Nelson <jdn@acp.qiv.com>, "Leonard C." <leonardc9@usa.net>
From: Brett Glass <brett@lariat.org>
Subject: Re: URGENT! Need help determining scope of attack...
Cc: security@FreeBSD.ORG
In-Reply-To: <Pine.BSF.3.96.981013174940.1244B-100000@acp.qiv.com>
References: <v04011702b24835d1f943@[10.0.0.2]>
Mime-Version: 1.0
Content-Type: text/plain; charset="us-ascii"
Sender: owner-freebsd-security@FreeBSD.ORG
Precedence: bulk
X-Loop: FreeBSD.org

At 06:12 PM 10/13/98 -0500, Jay Nelson wrote:
 
>The back doors they use are configurable as to which port
>they attach and they seem to like 3133[5-9] because of all the BO
>publicity. So I'm a little sensitive to anything touching those ports.

In the name of safe computing, you should always use a firewall and make 
sure no one touches your private ports.

(Sorry, couldn't resist.)

--Brett


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-security" in the body of the message