From owner-freebsd-security Mon Feb 19 13:18:13 2001 Delivered-To: freebsd-security@freebsd.org Received: from mail.safeserver.com (admin.mail.safeserver.com [216.122.69.100]) by hub.freebsd.org (Postfix) with SMTP id CD84437B401 for ; Mon, 19 Feb 2001 13:18:10 -0800 (PST) Received: (qmail 3616 invoked from network); 19 Feb 2001 21:18:09 -0000 Received: from unknown (HELO ANDYKIM) (207.23.243.200) by mail2.mail.safeserver.com with SMTP; 19 Feb 2001 21:18:09 -0000 Message-ID: <007901c09ab9$77d5c720$7300a8c0@DOMAIN> From: "Andy Kim" To: Subject: ICMP floods Date: Mon, 19 Feb 2001 13:18:12 -0800 MIME-Version: 1.0 Content-Type: multipart/alternative; boundary="----=_NextPart_000_0076_01C09A76.694DD1E0" X-Priority: 3 X-MSMail-Priority: Normal X-Mailer: Microsoft Outlook Express 5.50.4133.2400 X-MimeOLE: Produced By Microsoft MimeOLE V5.50.4133.2400 Sender: owner-freebsd-security@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.org This is a multi-part message in MIME format. ------=_NextPart_000_0076_01C09A76.694DD1E0 Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable Some of the servers have been getting hit several times with ICMP floods = from our FreeBSD server and we can't figure out why. They believe that = someone had hacked in and put a trojan on our box. Is there any way of = finding out what's going on and more importantly, how to fix the = problem? Any help would be greatly appreciated as I am rather new to = FreeBSD. Andy Kim ------=_NextPart_000_0076_01C09A76.694DD1E0 Content-Type: text/html; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable

Some of the servers have been getting = hit several=20 times with ICMP floods from our FreeBSD server and we can't figure out=20 why. They believe that someone had hacked in and put a trojan = on our=20 box. Is there any way of finding out what's going on and more = importantly,=20 how to fix the problem? Any help would be greatly appreciated as I = am=20 rather new to FreeBSD.

Andy Kim

------=_NextPart_000_0076_01C09A76.694DD1E0-- To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-security" in the body of the message