From owner-freebsd-questions Tue Jan 23 8:43:53 2001 Delivered-To: freebsd-questions@freebsd.org Received: from mailhub.vta.com (unknown [208.199.187.6]) by hub.freebsd.org (Postfix) with ESMTP id C3FF637B69D for ; Tue, 23 Jan 2001 08:43:35 -0800 (PST) Received: (from fbsd@localhost) by mailhub.vta.com (8.9.3/8.9.3) id LAA78845 for questions@freeBSD.org; Tue, 23 Jan 2001 11:56:43 -0500 (EST) (envelope-from fbsd@vta.com) Date: Tue, 23 Jan 2001 11:56:43 -0500 (EST) From: FreeBSD Mailing List Info Message-Id: <200101231656.LAA78845@mailhub.vta.com> To: questions@freeBSD.org Subject: Re: Linux -vs-FreeBSD Sender: owner-freebsd-questions@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.ORG Yep, from copious use of UTSL[ 1 ], the rpc.statd(8) manpage, the red-hat-weenie web site (www.redhat.com/support/erratta/RHSA-2000-043-03.html), the particle physics guys ( www.cert.org/advisories/CA-2000-17.html), and an old usenet- archived message from one of our own highly esteemed community, ( archives.neohapsis.com/freebsd/2000-08/0163.html), I sort-of came to the conclusion that my portmapper and rpc ports should be monitored for a while. Thus I'm pretty sure that's what's filling up the logs. The FreeBSD art I'd like to see is Chuck roasting Tux on the end of the pitchfork, over a stack of burining $Msoft cd-roms and red hats. Hmm, dinner, roast pengin-kabob , then back to work. [ 2 ]. [ 1 ]. Use The Source, Luke. [ 2 ]. Although, I have to admit, some of the tiny embedded Linux solutions seem to pretty good, so maybe Chuck doesn't eat the hors d'ouvres. > >On Tue, Jan 23, 2001 at 10:48:50AM -0500, FreeBSD Mailing List Info wrote: >> One big diffrence I have discovered is that SUSE and Debian users >> appear to be much smarter that the Red Hat weenies, who apparently haven't >> figured out that this rpc.statd exploit, which will make many Red Hat machines >> wide open to being rooted, just doesn't work on FreeBSD. I have yet to point >> Netcraft ( or other methods ) back at one of these silly bastards and not find >> out that they are Red Hat propeller-heads. >[...] >> Jan 23 01:06:33 not_a_linux_weenie /kernel: ipfw: X000 Count TCP 204.185.158.217:4808 XXX.XXX.XXX.X:111 in via mx0 > >Is that what all the recent activity has been about on port 111? Of late >I'm getting hit on 111 more often than even 27374. > >-- >David Kelly N4HHE, dkelly@hiwaay.net (hm) >====================================================================== >The human mind ordinarily operates at only ten percent of its >capacity -- the rest is overhead for the operating system. > To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-questions" in the body of the message