Date: Tue, 9 Oct 2001 16:37:30 -0700 (PDT) From: Randy Lee <bl33z@yahoo.com> To: questions@freebsd.org Cc: freebsd-security@freebsd.org Subject: ipfw - DoS ? Message-ID: <20011009233730.11902.qmail@web20907.mail.yahoo.com>
next in thread | raw e-mail | index | archive | help
Oct 9 12:00:02 MY /kernel: Connection attempt to TCP 216.8.77.2:0 from 202.228.131.2:3072 Oct 9 12:00:02 MY /kernel: Connection attempt to TCP 216.8.77.2:0 from 202.105.10.73:3072 Oct 9 12:00:02 MY /kernel: Connection attempt to TCP 216.8.77.2:0 from 209.114.222.105:3072 Oct 9 12:00:03 MY /kernel: Connection attempt to TCP 216.8.77.2:0 from 209.215.254.43:3072 Oct 9 12:00:04 MY /kernel: Connection attempt to TCP 216.8.77.2:0 from 209.10.122.24:1024 Oct 9 12:00:04 MY /kernel: Connection attempt to TCP 216.8.77.2:0 from 216.79.11.124:3072 Oct 9 12:00:04 MY /kernel: Connection attempt to TCP 216.8.77.2:0 from 216.248.242.59:1024 Oct 9 12:00:05 MY /kernel: Connection attempt to TCP 216.8.77.2:0 from 202.253.21.75:3072 Oct 9 12:00:06 MY /kernel: Connection attempt to TCP 216.8.77.2:0 from 202.204.219.111:1024 Oct 9 12:00:08 MY /kernel: Connection attempt to TCP 216.8.77.2:0 from 202.173.45.46:3072 Oct 9 12:00:08 MY /kernel: Connection attempt to TCP 216.8.77.2:0 from 209.245.158.51:3072 Oct 9 12:00:10 MY /kernel: Connection attempt to TCP 216.8.77.2:0 from 209.5.171.39:1024 Oct 9 12:00:11 MY /kernel: Connection attempt to TCP 216.8.77.2:0 from 216.163.72.16:1024 Oct 9 12:00:11 MY /kernel: Connection attempt to TCP 216.8.77.2:0 from 216.138.54.79:3072 Is someone is DoS'ing my server ? How can i deny all connection from port :3072 and :1024 using ipfw ? Any Idea is appreciated. __________________________________________________ Do You Yahoo!? Make a great connection at Yahoo! Personals. http://personals.yahoo.com To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-questions" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20011009233730.11902.qmail>