Skip site navigation (1)Skip section navigation (2)
Date:      Sun, 13 Jun 1999 14:47:12 -0500 (CDT)
From:      Jay Nelson <jdn@acp.qiv.com>
To:        Dag-Erling Smorgrav <des@flood.ping.uio.no>
Cc:        security@FreeBSD.ORG
Subject:   Re: Connection attempts to port 7
Message-ID:  <Pine.BSF.4.05.9906131425340.801-100000@acp.qiv.com>
In-Reply-To: <xzpzp24rony.fsf@flood.ping.uio.no>

next in thread | previous in thread | raw e-mail | index | archive | help
On 13 Jun 1999, Dag-Erling Smorgrav wrote:

>If the source address is spoofed, it's not a connection attempt, but a
>syn flood. Set up a firewall to drop connection attempts to all ports

[snip]

It doesn't appear to be a syn flood. The machine is firewalled and
the refused connections, I don't think, reveal any more than
necessary about the platform. I think the answer from Ed Porter
probably explains what is happening, but glosses over the
ramifications of the information gathered.

I hate to be so suspicious, but this concerns me.

Thanks for the reply.

-- Jay



To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-security" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?Pine.BSF.4.05.9906131425340.801-100000>