Skip site navigation (1)Skip section navigation (2)
Date:      Wed, 25 Oct 2000 09:08:54 +0800
From:      "Craig Beasland" <craig@hotmix.com.au>
To:        <questions@freebsd.org>
Subject:   Possible network attack
Message-ID:  <B1471D5DCC74D4119444004005E23A2001CEA5@CORONA>

next in thread | raw e-mail | index | archive | help
Hi there,

This morning I received an email from someone in nz suggesting that may
system may have been breached, based on some entries in his firewall log.
There are about 100 of these message he sent back to me, but I have no idea
what the problem may be.  The system is running

This machine runs userland ppp -ddial -alias for its internet connection and
ipfw with an open policy.

cheers
craig

8:02:44 drop   trex-public >qfe0 proto icmp src kipco.mydomain.com.au dst
95-127.team.xtra.co.nz rule 64 icmp-type 8 icmp-code 0
 8:02:44 drop   trex-public >qfe0 proto icmp src kipco.mydomain.com.au dst
95-126.team.xtra.co.nz rule 64 icmp-type 8 icmp-code 0
 8:02:44 drop   trex-public >qfe0 proto icmp src kipco.mydomain.com.au dst
95-125.team.xtra.co.nz rule 64 icmp-type 8 icmp-code 0
 8:02:44 drop   trex-public >qfe0 proto icmp src kipco.mydomain.com.au dst
95-124.team.xtra.co.nz rule 64 icmp-type 8 icmp-code 0
 8:02:44 drop   trex-public >qfe0 proto icmp src kipco.mydomain.com.au dst
95-123.team.xtra.co.nz rule 64 icmp-type 8 icmp-code 0
 8:02:44 drop   trex-public >qfe0 proto icmp src kipco.mydomain.com.au dst
95-122.team.xtra.co.nz rule 64 icmp-type 8 icmp-code 0
 8:02:44 drop   trex-public >qfe0 proto icmp src kipco.mydomain.com.au dst
95-121.team.xtra.co.nz rule 64 icmp-type 8 icmp-code 0



To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-questions" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?B1471D5DCC74D4119444004005E23A2001CEA5>