On Mon, 2 Oct 2000, Jack Bowling wrote:

> And I do advise everybody to set up a firewall. I am startled by
> the amount of snooping and scanning going on out there. Last night
> I even had one bozo try to get in on port 1 tcpmux as shown in the
> following hitlist entry. I did a hostname lookup on the IP.
> 
> Port       Sent from                                           Service
>          Time
> 
>  1          sl-gw11-sea-0-0.sprintlink.net          tcpmux          Oct
>  1 23:40

Definitely. I log and report about a dozen scans a week of my
company's class-C.

For a bit of levity: it always cracks me up when I see my firewall log
a host scan (typically for 137:139, as if I'd let *that* through)
originating from one of the reserved private networks...

--
 John Hardin KA7OHZ   ICQ#15735746   http://www.wolfenet.com/~jhardin/
 [EMAIL PROTECTED]      pgpk -a finger://gonzo.wolfenet.com/jhardin
  768: 0x41EA94F5 - A3 0C 5B C2 EF 0D 2C E5  E9 BF C8 33 A7 A9 CE 76 
 1024: 0xB8732E79 - 2D8C 34F4 6411 F507 136C  AF76 D822 E6E6 B873 2E79
-----------------------------------------------------------------------
  "Bother," said Pooh as he struggled with /etc/sendmail.cf, "it never
  does quite what I want. I wish Christopher Robin was here."
                                -- Peter da Silva in a.s.r
-----------------------------------------------------------------------
   24 days until Daylight Savings Time ends



_______________________________________________
Redhat-list mailing list
[EMAIL PROTECTED]
https://listman.redhat.com/mailman/listinfo/redhat-list

Reply via email to