Date: Fri, 12 Nov 1999 09:35:03 -0600 (CST) From: Alex Charalabidis <alex@wnm.net> To: Don Read <dread@calcasieu.com> Cc: os2_daemon@altavista.net, freebsd-questions@FreeBSD.ORG Subject: RE: FreeBSD security on TCP/IP question. Message-ID: <Pine.BSI.4.05.9911120921160.18888-100000@earth.wnm.net> In-Reply-To: <XFMail.991112075322.dread@calcasieu.com>
next in thread | previous in thread | raw e-mail | index | archive | help
On Fri, 12 Nov 1999, Don Read wrote: > > It all started when curiously, I tried to put 172.16.1.1 which is an NT > > server into ifconfig. Ifconfig said some error messages that the IP address > > have been taken by another machine. Who cares ... > > > just the rest of the 172.16 network. > > > Next day, the sysadmin came to me and accusing me for trying to hijack the > > system. He told me that apparently I crashed his NT by doing so. This brought > > me a very big question. Was he just bluffing, or the NT seriously cannot > > defend against this ? > > I've never seen NT fall-over from this; it's lame, but not that fscking lame. > usually it stopps accepting or sending packets for various intervals and give a > whinging dialog. > Never seen it kill an NT machine but, from my observations, most of the time NT will graciously give up an IP address to the hijacker and complain very little. You should just see it go offline mysteriously. Of course it may need rebooting in order to recover the address... > > I also wonder what will happen to a FreeBSD box if some other computer claim > > the same IP address. > > pretty much the same, stop accepting or transmitting packets, and complain > loudly. When someone on my network did the same with a FreeBSD box, I had two FreeBSD machines fighting to their bloody death over the IP address (oddly enough, the 2.1.5 hijacker was winning over the 4.0 victim most of the time). Morale: DON'T DO IT. -ac -- ============================================================== Alex Charalabidis (AC8139) 5050 Poplar Ave, Ste 170 Systems Administrator Memphis, TN 38157 WebNet Memphis (901) 432 6000 ============================================================== To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-questions" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?Pine.BSI.4.05.9911120921160.18888-100000>