Skip site navigation (1)Skip section navigation (2)
Date:      Sun, 28 Aug 2005 10:29:07 +1000
From:      freebsd-questions@auscert.org.au
To:        freebsd-questions@freebsd.org
Subject:   Re: Illegal access attempt - FreeBSD 5.4 Release - please advise 
Message-ID:  <200508280029.j7S0T7X4043956@app.auscert.org.au>
In-Reply-To: Your message of "Sat, 27 Aug 2005 19:59:40 -0400." <4310FE6C.6050401@nawcom.no-ip.com> 

next in thread | previous in thread | raw e-mail | index | archive | help
> -if the attempt was with a username that doesnt exist - i add the ip to 
> a db of banned ips and flush and restart ipfw

I'm curious about this bit - what do you do about accidentally mistyped
usernames by valid users?

cheers,
-- Joel Hatton --
Security Analyst                    | Hotline: +61 7 3365 4417
AusCERT - Australia's national CERT | Fax:     +61 7 3365 7031
The University of Queensland        | WWW:     www.auscert.org.au
Qld 4072 Australia                  | Email:   auscert@auscert.org.au



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?200508280029.j7S0T7X4043956>