From owner-freebsd-security Thu Dec 9 4:49: 4 1999 Delivered-To: freebsd-security@freebsd.org Received: from mail.powertech.no (intentia.powertech.no [195.159.0.220]) by hub.freebsd.org (Postfix) with ESMTP id 861FE14FB1 for ; Thu, 9 Dec 1999 04:49:01 -0800 (PST) (envelope-from shamz@login2.powertech.no) Received: from login2.powertech.no (IDENT:root@login2.powertech.no [195.159.0.152]) by mail.powertech.no (8.9.3/8.8.5) with ESMTP id NAA11455; Thu, 9 Dec 1999 13:48:20 +0100 Received: (from shamz@localhost) by login2.powertech.no (8.9.3/8.9.3) id NAA17275; Thu, 9 Dec 1999 13:48:58 +0100 Date: Thu, 9 Dec 1999 13:48:58 +0100 From: Shaun Jurrens To: Mark Newton Cc: freebsd-security@freebsd.org Subject: Re: What kind of attack is this? Message-ID: <19991209134858.D10267@shamz.net> Mail-Followup-To: Mark Newton , freebsd-security@freebsd.org References: <19991209124847.C10267@shamz.net> <19991209225414.A12037@atdot.dotat.org> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii X-Mailer: Mutt 0.95.4us In-Reply-To: <19991209225414.A12037@atdot.dotat.org>; from Mark Newton on Thu, Dec 09, 1999 at 10:54:14PM +1030 Sender: owner-freebsd-security@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.org On Thu, Dec 09, 1999 at 10:54:14PM +1030, Mark Newton wrote: #> On Thu, Dec 09, 1999 at 12:48:47PM +0100, Shaun Jurrens wrote: #> #> > Just a note, I think you will find some useful preliminary work already done. #> > IIRC, Dag-Erling has written some code that he uses on his irc servers for #> > udp/smurf attacks. #> #> What, code to automatically smurf the kiddies who are stupid enough to #> get on IRC and talk about hacking? About time someone did that :-) #> #> - mark Well, for a start, the admins of the well-known sites that make the attacks so serious because of network misconfiguration (as well as their upstream providers) could receive tons of angry e-mail. The "amplifier" sites are easy to find for the script kiddies too. You can find more at: http://www.powertech.no/smurf -and a list of the biggest offenders (which I see has gotten better, I hope no FreeBSD natives can be found here )- http://www.netscan.org/lamers-r-us.html I hope I was of some help. -- Yours truly, Shaun D. Jurrens shaun@shamz.net IRCnick: shamz #chillout #unix To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-security" in the body of the message