Date: Thu, 11 Feb 1999 18:41:31 -0700 (MST) From: Ryan Mooney <ryan@pcslink.com> To: tetsuhiro@tsuzuki.ne.jp (tetsuhiro) Cc: freebsd-isp@FreeBSD.ORG Subject: Re: Someone sent me a security notice Message-ID: <199902120141.SAA19923@pcslink.com> In-Reply-To: <36C37B77.4AD78E47@tsuzuki.ne.jp> from tetsuhiro at "Feb 12, 99 09:53:11 am"
next in thread | previous in thread | raw e-mail | index | archive | help
Likely someone from your site did a traceroute (which uses UDP to port 31337 or thereabouts depending on the version) to this uninformed and paranoid individual. They saw the error in thier logs and not understanding it did the obvious reverse things (ARIN whois, nslookup/whois,, etc..) to find out who might own the originating PC. Apparently this is you (or else you would've trashed it :). The thing to do is send them a kind and considerate note explaining that traceroute is not a hack attempt it is simpley a standard diagnostic tool, and if they send a nasty gram to everyone who ever traceroutes to thier network they will be busy boys indeed. You then delete the e-mail and go have a beer :) > Yesterday I got a following message from someone via email. > I don't know who he/she is. > > xxx@xxx.net wrote: > > from our log files: > > > >Feb 9 12:14:39 smoke kernel: IP fw-in deny eth1 UDP 152.226.76.37:1277 >206.30.145.4:31337 L=46 > >S=0x00 I=1816 F=0x0000 T=108 > > > > Times are -0500. Please investigate this matter and take appropriate action. > > What should I do? > Frankly speaking I can not understand what he/she wrote. > I'd like to know he/she got my email address also. > > I'd appreciate your help. > Tetsuhiro > > To Unsubscribe: send mail to majordomo@FreeBSD.org > with "unsubscribe freebsd-isp" in the body of the message > >-=-=-=-=-=-=-<>-=-=-=-=-=-<>-=-=-=-=-=-<>-=-=-=-=-=-<>-=-=-=-=-=-=-< Ryan Mooney Phone (602)265-9188 PCSLink ryan@pcslink.com Internet Services NT is an excellent choice for managers who need to show that they used up their fiscal year budget for hardware/software expenditures. <-=-=-=-=-=-=-><-=-=-=-=-=-><-=-=-=-=-=-><-=-=-=-=-=-><-=-=-=-=-=-=-> To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-isp" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?199902120141.SAA19923>