Skip site navigation (1)Skip section navigation (2)
Date:      Fri, 17 Jan 2003 09:54:33 -0500
From:      "JoeB" <barbish@a1poweruser.com>
To:        "Jim Freeze" <jim@freeze.org>, "FreeBSD Questions" <FreeBSD-questions@FreeBSD.org>
Subject:   RE: Possible attack?
Message-ID:  <MIEPLLIBMLEEABPDBIEGOENDDDAA.barbish@a1poweruser.com>
In-Reply-To: <20030117093453.A9304@freeze.org>

next in thread | previous in thread | raw e-mail | index | archive | help
Just some body knocking at your front door.
What this means is you have ports 20 & 21 open
and your were port scanned.
You have to add some rules to your firewall.


-----Original Message-----
From: owner-freebsd-questions@FreeBSD.ORG
[mailto:owner-freebsd-questions@FreeBSD.ORG]On Behalf Of Jim Freeze
Sent: Friday, January 17, 2003 9:35 AM
To: FreeBSD Questions
Subject: Possible attack?

Hi:

I got an interesting log report today.
Has anyone seen such messages lately?

Jan 14 12:59:52 rabbit /kernel: ipfw: limit 100 reached on entry
64000
Jan 14 17:39:13 rabbit ftpd[1502]: ANONYMOUS FTP LOGIN REFUSED FROM
  p5089A961.dip.t-dialin.net
Jan 14 17:39:13 rabbit ftpd[1503]: ANONYMOUS FTP LOGIN REFUSED FROM
  p5089A961.dip.t-dialin.net
Jan 15 12:15:21 rabbit sm-mta[3937]: h0FHFIJI003936: Truncated MIME
  Content-Disposition header due to
 field size (length = 25) (possible attack)
Jan 15 17:33:03 rabbit ftpd[4434]: ANONYMOUS FTP LOGIN REFUSED FROM
 pD9E60C0F.dip.t-dialin.net
Jan 15 17:33:04 rabbit ftpd[4435]: ANONYMOUS FTP LOGIN REFUSED FROM
 pD9E60C0F.dip.t-dialin.net
Jan 15 23:59:48 rabbit sm-mta[5210]: h0G4xkJI005209: Truncated MIME
 Content-Disposition header due to
  field size (length = 22) (possible attack)



--
Jim Freeze
----------
"It's not Camelot, but it's not Cleveland, either."
                -- Kevin White, mayor of Boston

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-questions" in the body of the message


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-questions" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?MIEPLLIBMLEEABPDBIEGOENDDDAA.barbish>