Date: Sun, 20 Oct 2002 22:24:24 +0200 From: Robin Schilham <co9@xs4all.nl> To: Kent Stewart <kstewart@owt.com> Cc: Bryan Cassidy <bryanc2000@insightbb.com>, freebsd-questions <freebsd-questions@FreeBSD.ORG> Subject: Re: Security! Please help newbie Message-ID: <3DB310F8.2030605@xs4all.nl> References: <20021020125909.1acd7e7c.bryanc2000@insightbb.com> <3DB30EE6.8020909@owt.com>
next in thread | previous in thread | raw e-mail | index | archive | help
Kent Stewart wrote: > > > Bryan Cassidy wrote: > >> Heres the deal. Two days ago I was hacked. I know this for a fact. The >> guy was using my IP address in a Counter Strike game a friend of mine >> told me. He said he made sure he had the IP address of the person. I >> went online on IRC and when I got there he told me about what >> happened. The guy tried a DoS attack on my friend. I was also banned >> from a couple IRC Channels (I can get back in now) I couldnt connect 2 >> days ago for NOTHING. He was completely using all my bandwidth. We are >> in the process of finding out who this guy was to prosecute. I don't >> know what he used my IP address for and I don't think this is a >> game. I reinstalled FreeBSD yesterday sometime. We went through a >> couple security setups. I don't know anything about security. I will >> explain what I did. I adding the following into my kernel config >> >> # Firewall >> options IPFIREWALL >> options IPFIREWALL_VERBOSE >> options IPFIREWALL_VERBOSE_LIMIT=10 >> >> I also added the following to my /etc/rc.conf file >> >> firewall_enable="YES" >> firewall_quiet="YES" >> firewall_script="/etc/rc.firewall" >> firewall_type="/etc/ipfw.acl" > > > The type is supposed to be open, close, simple, and etc. It depends on > which type you are using in rc.firewall. Look for [Ss][Ii] and etc. According to the comments in /etc/rc.firewall firewall_type can also be a file name. Anyway, it might be better to start with one of the example rule sets in /etc/rc.firewall and adapt them to your needs. > > Kent > >> >> I then added the following the /etc/ipfw.acl >> >> add 1000 allow ip from any to any >> >> I have a few days off so I am going to be using these days for setting >> up security and learning security. If someone out there would please >> help me out with makeing sure my box is locked down tight I would >> really appreciate it. I find it very childish and even scary knowing >> someone has used my computer and not knowing everything he used it >> for. Thank You and I hope to get some replys real quick to resolve >> this matter as soon as possible. >> >> -------------------------------------------------------------------------- >> >> E-Mail: Bryan Cassidy <bryanc2000@insightbb.com> >> GAIM: bsdsys >> Yahoo Messenger: bsdsys >> >> I have put alot of time in setting up my mail filters. Please do not >> simply Reply-To: <bryanc2000@insightbb.com> unless said so.Please >> Reply-To the appropriate mailing list. This is very annoying for me. >> >> To Unsubscribe: send mail to majordomo@FreeBSD.org >> with "unsubscribe freebsd-questions" in the body of the message >> >> . >> > > To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-questions" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?3DB310F8.2030605>