Hi Sender:
I will be out of the office until July 10, 2000. Please contact Dudley Smith,
Consulting Branch Lead, during my absence. His number is 703 713 3702.
Thank you and have a nice day.
Joe Huang
DC Consulting Branch Manager
>>> Firewalls 07/09/00 04:00 >>>
Firewalls-Digest Sunday, July 9 2000 Volume 08 : Number 1077
In this issue:
Re: Firewalls-Digest V8 #1076 ((Out of Office))
Re: IP Spoofing
Re: Second Edition of "Building Internet Firewalls" now available
Re: Second Edition of "Building Internet Firewalls" now available
See the end of the digest for information on subscribing to the Firewalls
or Firewalls-Digest mailing lists and on how to retrieve back issues.
----------------------------------------------------------------------
Date: Sat, 08 Jul 2000 02:01:54 -0600
From: "Joe Huang" <[EMAIL PROTECTED]>
Subject: Re: Firewalls-Digest V8 #1076 ((Out of Office))
Hi Sender:
I will be out of the office until July 10, 2000. Please contact Dudley Smith,
Consulting Branch Lead, during my absence. His number is 703 713 3702.
Thank you and have a nice day.
Joe Huang
DC Consulting Branch Manager
>>> Firewalls 07/08/00 04:00 >>>
Firewalls-Digest Saturday, July 8 2000 Volume 08 : Number 1076
In this issue:
Re: IP Spoofing
Re: IP Spoofing
See the end of the digest for information on subscribing to the Firewalls
or Firewalls-Digest mailing lists and on how to retrieve back issues.
- ----------------------------------------------------------------------
Date: Sat, 08 Jul 2000 05:31:13 +0200
From: Mikael Olsson <[EMAIL PROTECTED]>
Subject: Re: IP Spoofing
Rogier Maas wrote:
> Our network is beeing Ping-Attacked every night by someone we don't know
> where from. The packets seem to come from all over the Net, sending ICMP
> Echo Request packets to the broadcast address and all our servers reply
> to the wrong host, probably the target of the original attacker.
>
> My question is: how do I get the attackers IP-address?
I think you'll find the info you need at
http://www.netscan.org/lamers-r-us.html
Two words:
1) Smurf
2) Amplifier
- - --
Mikael Olsson, EnterNet Sweden AB, Box 393, S-891 28 �RNSK�LDSVIK
Phone: +46 (0)660 29 92 00 Direct: +46 (0)660 29 92 05
Mobile: +46 (0)70 66 77 636 Fax: +46 (0)660 122 50
WWW: http://www.enternet.se/ E-mail: [EMAIL PROTECTED]
- - -
[To unsubscribe, send mail to [EMAIL PROTECTED] with
"unsubscribe firewalls" in the body of the message.]
- ------------------------------
Date: Sat, 08 Jul 2000 01:43:27 -0500
From: Spikeman <[EMAIL PROTECTED]>
Subject: Re: IP Spoofing
you are being used as a smurf amplifier, fix your network
Rogier Maas wrote:
> Hi List,
>
> Our network is beeing Ping-Attacked every night by someone we don't know
> where from. The packets seem to come from all over the Net, sending ICMP
> Echo Request packets to the broadcast address and all our servers reply
> to the wrong host, probably the target of the original attacker.
>
> My question is: how do I get the attackers IP-address?
>
> TIA,
>
> Rogier Maas
> -
> [To unsubscribe, send mail to [EMAIL PROTECTED] with
> "unsubscribe firewalls" in the body of the message.]
- - --
___
/\ \ phase two of global domination in operation, hide all lions.
/::\ \
/:/\:\ \ Comments or Questions email [EMAIL PROTECTED]
_\:\~\:\ \
/\ \:\ \:\__\ Spikeman [EMAIL PROTECTED]
\:\ \:\ \/__/ http://www.spikeman.net
\:\ \:\__\ Find Me On EFNET /whois Spikeman
\:\/:/ /
\::/ / Friends are lights in winter;
\/__/ The older the friend, the brighter the light.
- - -
[To unsubscribe, send mail to [EMAIL PROTECTED] with
"unsubscribe firewalls" in the body of the message.]
- ------------------------------
End of Firewalls-Digest V8 #1076
********************************
To unsubscribe from Firewalls-Digest, send the following command
in the body of a message to "[EMAIL PROTECTED]":
unsubscribe firewalls-digest
If you want to subscribe or unsubscribe an address other than the
account the mail is coming from, such as a local redistribution list,
then append that address to the command; for example, to subscribe
"local-firewalls":
subscribe firewalls-digest [EMAIL PROTECTED]
A non-digest (direct mail) version of this list is also available; to
subscribe to that instead, replace all instances of "firewalls-digest"
in the commands above with "firewalls".
Compressed back issues are available for anonymous FTP from
Lists.GNAC.NET, in pub/firewalls/digest/vNN.nMMM.Z (where "NN"
is the volume number, and "MMM" is the issue number).
- -
[To unsubscribe, send mail to [EMAIL PROTECTED] with
"unsubscribe firewalls" in the body of the message.]
------------------------------
Date: Sat, 08 Jul 2000 17:48:03 +0200
From: Rogier Maas <[EMAIL PROTECTED]>
Subject: Re: IP Spoofing
Well, to set things straight: It ain't my network. My server is located
there; so it's my ISP to blame really. I have pointed out that they
should install a firewall, as they have none.
Yup, that right: they have no protection whatsoever.
I think I'll let them hire me!
btw: They're smurfing and fraggling us (trem).
Greetings,
Rogier Maas
Network Operations wrote:
>
> Why do you even want the "attackers" address? You shouldn't allow ICMP traffic in
>through your firewall in the first place.
>
> If your network design is broken, don't blame people for taking advantage of you.
>Thank them for pointing out your weaknesses, fix your gear, and be done with it.
>
> cheers,
>
> Marc..
>
> >>> Rogier Maas <[EMAIL PROTECTED]> 07/07/00 02:22PM >>>
> Hi List,
>
> Our network is beeing Ping-Attacked every night by someone we don't know
> where from. The packets seem to come from all over the Net, sending ICMP
> Echo Request packets to the broadcast address and all our servers reply
> to the wrong host, probably the target of the original attacker.
>
> My question is: how do I get the attackers IP-address?
>
> TIA,
>
> Rogier Maas
> -
> [To unsubscribe, send mail to [EMAIL PROTECTED] with
> "unsubscribe firewalls" in the body of the message.]
>
> -
> [To unsubscribe, send mail to [EMAIL PROTECTED] with
> "unsubscribe firewalls" in the body of the message.]
- -
[To unsubscribe, send mail to [EMAIL PROTECTED] with
"unsubscribe firewalls" in the body of the message.]
------------------------------
Date: Sun, 9 Jul 2000 00:09:41 +0800
From: Ng Pheng Siong <[EMAIL PROTECTED]>
Subject: Re: Second Edition of "Building Internet Firewalls" now available
On Fri, Jul 07, 2000 at 09:46:36AM -0700, Brent Chapman wrote:
> pages), it now covers Windows NT and Linux as well as UNIX, and it
Et tu, Brent?
What's the difference between Linux and UNIX?
- --
Ng Pheng Siong <[EMAIL PROTECTED]> * http://www.post1.com/home/ngps
- -
[To unsubscribe, send mail to [EMAIL PROTECTED] with
"unsubscribe firewalls" in the body of the message.]
------------------------------
Date: Sat, 8 Jul 2000 20:45:32 -0400 (EDT)
From: William Stearns <[EMAIL PROTECTED]>
Subject: Re: Second Edition of "Building Internet Firewalls" now available
Good day, Ng and Brent,
On Sun, 9 Jul 2000, Ng Pheng Siong wrote:
> On Fri, Jul 07, 2000 at 09:46:36AM -0700, Brent Chapman wrote:
> > pages), it now covers Windows NT and Linux as well as UNIX, and it
>
> Et tu, Brent?
>
> What's the difference between Linux and UNIX?
(The following is my best understanding of the topic, but may not
be entirely correct)
Unix is a trademark, originally owned by AT&T, for it's operating
system. (I believe that trademark has been transferred to The Open
Group.)
Linux is an operating system that was written without any of the
original AT&T Unix source code. It looks and acts like Unix (it
generally follows the relevant POSIX standards), but does not
have the right to use that trademark.
Cheers,
- Bill
- ---------------------------------------------------------------------------
Daphne: At least someone appreciates my mother tongue.
Niles: Yes, I've always had an ear for your tongue.
- --------------------------------------------------------------------------
William Stearns ([EMAIL PROTECTED]). Mason, Buildkernel, named2hosts,
and ipfwadm2ipchains are at: http://www.pobox.com/~wstearns
LinuxMonth; articles for Linux Enthusiasts! http://www.linuxmonth.com
- --------------------------------------------------------------------------
- -
[To unsubscribe, send mail to [EMAIL PROTECTED] with
"unsubscribe firewalls" in the body of the message.]
------------------------------
End of Firewalls-Digest V8 #1077
********************************
To unsubscribe from Firewalls-Digest, send the following command
in the body of a message to "[EMAIL PROTECTED]":
unsubscribe firewalls-digest
If you want to subscribe or unsubscribe an address other than the
account the mail is coming from, such as a local redistribution list,
then append that address to the command; for example, to subscribe
"local-firewalls":
subscribe firewalls-digest [EMAIL PROTECTED]
A non-digest (direct mail) version of this list is also available; to
subscribe to that instead, replace all instances of "firewalls-digest"
in the commands above with "firewalls".
Compressed back issues are available for anonymous FTP from
Lists.GNAC.NET, in pub/firewalls/digest/vNN.nMMM.Z (where "NN"
is the volume number, and "MMM" is the issue number).
-
[To unsubscribe, send mail to [EMAIL PROTECTED] with
"unsubscribe firewalls" in the body of the message.]
