Re: [strongSwan] How to block Netstat attacks from VPN users?

2019-10-14 Thread Noel Kuntze
osigma.com <mailto:thor.si...@twosigma.com> > <mailto:thor.si...@twosigma.com <mailto:thor.si...@twosigma.com>> > <mailto:thor.si...@twosigma.com <mailto:thor.si...@twosigma.com> > <mailto:thor.si...@twosigma.com <mailto:thor.si...@twosigma.com>>>>

Re: [strongSwan] How to block Netstat attacks from VPN users?

2019-10-14 Thread Houman
t; > > > > > > > Thanks, > > > > > > > > > > On Tue, 30 Jul 2019 at 15:30, Thor Simon < > thor.si...@twosigma.com <mailto:thor.si...@twosigma.com> thor.si...@twosigma.com <mailto:

Re: [strongSwan] How to block Netstat attacks from VPN users?

2019-10-14 Thread Noel Kuntze
gt;>> > <mailto:thor.si...@twosigma.com <mailto:thor.si...@twosigma.com> > <mailto:thor.si...@twosigma.com <mailto:thor.si...@twosigma.com>> > <mailto:thor.si...@twosigma.com <mailto:thor.si...@twosigma.com> > <mailto:thor.si...@twosigma.com <mailt

Re: [strongSwan] How to block Netstat attacks from VPN users?

2019-10-14 Thread Houman
> > > > Thanks, > > > > > > > > On Tue, 30 Jul 2019 at 15:30, Thor Simon < > thor.si...@twosigma.com <mailto:thor.si...@twosigma.com> thor.si...@twosigma.com <mailto:thor.si...@twosigma.com>> thor.si..

Re: [strongSwan] How to block Netstat attacks from VPN users?

2019-10-14 Thread Noel Kuntze
osigma.com <mailto:thor.si...@twosigma.com> > <mailto:thor.si...@twosigma.com <mailto:thor.si...@twosigma.com>>>> wrote: > >         > > >         >     I don't think netstat does what you think it does.  It is > a _local_ tool.  Pe

Re: [strongSwan] How to block Netstat attacks from VPN users?

2019-10-14 Thread Houman
t; the ports. Am I correct? > > > > > > Thanks, > > > > > > On Tue, 30 Jul 2019 at 15:30, Thor Simon < > thor.si...@twosigma.com <mailto:thor.si...@twosigma.com> thor.si...@twosigma.com <mailto:thor.si...@tw

Re: [strongSwan] How to block Netstat attacks from VPN users?

2019-10-14 Thread Noel Kuntze
hink it does.  It is a > _local_ tool.  Perhaps the "abuse notification" you received is a phishing > attack? > > > >     Hae a look at the manual page: > > > >     http://manpages.ubuntu.com/manpages/trusty/man8/netstat.8

Re: [strongSwan] How to block Netstat attacks from VPN users?

2019-10-14 Thread Houman
t does. It is a _local_ >> tool. Perhaps the "abuse notification" you received is a phishing attack? >> > >> > Hae a look at the manual page: >> > >> > http://manpages.ubuntu.com/manpages/trusty/man8/netstat.8.html >> > >>

Re: [strongSwan] How to block Netstat attacks from VPN users?

2019-10-14 Thread Houman
abuse notification" you received is a phishing attack? > > > > Hae a look at the manual page: > > > > http://manpages.ubuntu.com/manpages/trusty/man8/netstat.8.html > > > > ____________ > > From: Houman mailto

Re: [strongSwan] How to block Netstat attacks from VPN users?

2019-07-31 Thread Noel Kuntze
_ > From: Houman mailto:hou...@gmail.com>> > Sent: Jul 30, 2019 10:18 AM > To: users@lists.strongswan.org <mailto:users@lists.strongswan.org> > Subject: [strongSwan] How to block Netstat attacks from VPN users? > > H

Re: [strongSwan] How to block Netstat attacks from VPN users?

2019-07-30 Thread Houman
m: Houman > Sent: Jul 30, 2019 10:18 AM > To: users@lists.strongswan.org > Subject: [strongSwan] How to block Netstat attacks from VPN users? > > Hello, > > I had an interesting abuse notification that someone has run a netstat > through our VPN. > > > t

Re: [strongSwan] How to block Netstat attacks from VPN users?

2019-07-30 Thread Thor Simon
Sent: Jul 30, 2019 10:18 AM To: users@lists.strongswan.org Subject: [strongSwan] How to block Netstat attacks from VPN users? Hello, I had an interesting abuse notification that someone has run a netstat through our VPN. > timeprotocol src_ip src_port dest

[strongSwan] How to block Netstat attacks from VPN users?

2019-07-30 Thread Houman
Hello, I had an interesting abuse notification that someone has run a netstat through our VPN. > timeprotocol src_ip src_port dest_ip dest_port > --- > Tue Jul 30 13:38:01 2019 UDP 136.243.xxx.xxx