From owner-freebsd-hackers Thu Nov 16 2:51: 8 2000 Delivered-To: freebsd-hackers@freebsd.org Received: from luxren2.boostworks.com (luxren2.boostworks.com [194.167.81.214]) by hub.freebsd.org (Postfix) with ESMTP id 04DF137B4CF for ; Thu, 16 Nov 2000 02:50:48 -0800 (PST) Received: from boostworks.com (root@oldrn.luxdev.boostworks.com [192.168.1.99]) by luxren2.boostworks.com (8.9.1/8.9.1) with ESMTP id LAA20403; Thu, 16 Nov 2000 11:49:33 +0100 (CET) Message-Id: <200011161049.LAA20403@luxren2.boostworks.com> Date: Thu, 16 Nov 2000 11:50:44 +0100 (CET) From: Remy Nonnenmacher Reply-To: remy@boostworks.com Subject: Re: Any known issue about icmp replies ? To: silby@silby.com Cc: eugen@bcs.zp.ua, hackers@freebsd.org In-Reply-To: MIME-Version: 1.0 Content-Type: TEXT/plain; CHARSET=US-ASCII Sender: owner-freebsd-hackers@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.ORG On 16 Nov, Mike Silbersack wrote: > > On Thu, 16 Nov 2000, Eugene Polovnikov wrote: > >> Are you sure that your system isn't hacked/cracked ? >> Content of packets look strange for me. > > Yeah, now that you suggested that, I checked - that's Stacheldraht's > handiwork. > > Unplug the box soon, Remy! > > Mike "Silby" Silbersack > OK. got the reference. I simply dropped any icmp packets to this machine of no importance. It's amazing to find such a breach known for a year and not fixed. Well. I'm getting more and more convinced that L will be the next W$... Thanks. RN. IeM To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-hackers" in the body of the message