On Fri, Feb 18, 2000 at 03:17:41PM -0500, Floyd Moore wrote:
> I agree every one of the buggers should be reported. At least Twenty
> Scans for Trojans are recorded here every week. It's a disgrace and we
> can all assist in wiping it out by tracking and reporting them.
Assuming tracking is possible. If you report on the basis that
the source address of the portscan is really the source address of the person
portscanning you (or forging a portscan), I would use Queen Amidala's words:
You assume too much.
Forging portscans is trivial. Don't always assume and start reporting/
demading responsability from an ISP just becase you received a probe with the
source address of that ISP. If your main sources of information are unrealiable,
then your assumptions will be unreliable too.
Regards,
LiquidK
--
LiquidK <[EMAIL PROTECTED]>
http://superbofh.org/
-
[To unsubscribe, send mail to [EMAIL PROTECTED] with
"unsubscribe firewalls" in the body of the message.]
