On Fri, 24 May 2002 20:04:45 -0600 Femme <[EMAIL PROTECTED]> wrote:
> On Fri, 24 May 2002 18:51:02 -0700 > Brian <[EMAIL PROTECTED]> wrote: > > > > > On Fri, 24 May 2002 18:48:41 -0600 > > Femme <[EMAIL PROTECTED]> wrote: > > > > > On Fri, 24 May 2002 19:19:47 -0500 > > > "J. Craig Woods" <[EMAIL PROTECTED]> wrote: > > > > > > > > > > > Femme, you need to talk to us. Am I the only one that feels your > > > > postings are somewhat cryptic. Are you being hit with an ddos type > > > > of attack? Why, if I might ask, are your running a ftp service > > > > using windows? Anyone here could refer you to many sites that > > > > would advise you against such an activity. Are you saying that you > > > > run your netbios on the internet, and what is a "g/f*". Maybe it > > > > is just me that is out to lunch but if you want some help, you > > > > will need to be a bit more forthcoming.... > > > > > > > > drjung > > > > > > > > > > Sorry i forget my shorthand isn't used by all. > > > > > > I'm running a small ftp for people on windows because thats all I > > > knew, until recently finding Linux. Linux is perfectly capable of > > > doing this but i don't know how to use an ftp server in it. So, I > > > use windows for now. Its a small ftp server using "Serv-U" as the > > > server itself. > > > > > > As for Netbios, whats happening is my logs say someone is trying to > > > get through to it. Don't know why. I thought it was because I > > > share a hard drive with my girlfriend at home on a 3 computer LAN. > > > I'm behind a firewall called zone alarm, and it logs any connect > > > attempts rather thoroughly. I also have a log analyzing program > > > that tells me what the logs mean, who's IP it was that tried to > > > connect, type of connection logged, etc. > > > > > > What I want is simply to run a small ftp server for ppl on these > > > lists & for close friends to connect to for documents & music. > > > Windows until the last 3 or 4 days, has done a fine job of it. > > > However in the last few days I've been getting knocked off line for > > > whatever reason, and I suspect its because of this ftp thats up & > > > running. Its the only plausible explanation I have other than my > > > ISP is screwing up. > > > > > > I did call the ISP to see if there were any problems & the automated > > > service they use told me there seem to be none in my area. > > > > > > Today I booted into linux, setup teh Bastille firewall & made it > > > pretty secure against outside interference. I'm hoping that if it > > > is a hacker/cracker trying to gain entry, bastille will log the > > > attempts more thoroughly so I may find out what to do. If its just > > > my isp I'm hoping that will be logged as well somehow. I also hope > > > if it is a cracker trying to get in, Bastille will do a better job > > > of stopping them & I won't get knocked offline as was happening in > > > Windows. > > > > > > Sorry if I haven't been very clear, been on painkillers for two > > > days. Today is the first day I've got a clearer mind & I hope this > > > explanation suffices for you Dr.Jung *s*. > > > > > > Thx for your help, if you can offer any on how to setup a small ftp > > > (or something) to do what I need it to do. > > > > > > Femme > > > > > > > You might want to try ProFTP for your ftp server on linux. > > > > It's pretty normal for you to see connection attempts blocked by zone > > alarm - you are using visual zone to show the logs? Right now you > > might be seeing more attempts to connect to port 1433 than anything > > else unless your ISP is already blocking that port. > > > > -- > > Brian - [EMAIL PROTECTED] > > > > Yes I'm seeing 1433 turn up alot along with some suspicious ports :( > > Don't know what to do about it.... I reconfigured Bastille intoa more > paranoid mode, and since I've done that 20 mins ago, it seems to be > holding up much more like the BrickWall its supposed to be. > > Crossing my fingers this continues. I will run linux for a day or so & > see if this Firewall I just did in Linux will work as well as I hope it > shall. Ty for your info. > > What is 1433 anyway? Sorry but i'm totally clueless :( > > Femme > 1433 is the Microsoft SQL server port - lots of attacks going around trying to gain access to sites which didn't set an administrator password. -- Brian - [EMAIL PROTECTED] My Home Page: http://www.brimac.com/~brianmac Fine Photos: http://www.brimacphotography.com Art for Sale: http://www.artbrowser.com Classified Advertising: http://www.sellit2000.com The trouble with doing something right the first time is that no one appreciates how difficult it was.
Want to buy your Pack or Services from MandrakeSoft? Go to http://www.mandrakestore.com
