Date: Tue, 04 Apr 2000 01:50:06 GMT From: mike@sentex.net (Mike Tancsa) To: stanb@netcom.com (Stan Brown) Cc: freebsd-net@FreeBSD.ORG Subject: Re: Help, I am being scanned! Message-ID: <38e949fe.348672764@mail.sentex.net> In-Reply-To: <SEN.954770768.129239573@news.sentex.net> References: <SEN.954770768.129239573@news.sentex.net>
next in thread | previous in thread | raw e-mail | index | archive | help
On 3 Apr 2000 10:06:08 -0400, in sentex.lists.freebsd.net you wrote: > My ISP seems to be saning my system. Look here: > > >Apr 2 04:44:51 koala /kernel: ipfw: 2800 Deny TCP 24.0.94.130:50869 24.6.61.166:119 in via ed1 > That Ip translates to authorized-scan.security.home.ne. I don't > recognize these ports, what are they? How can I protect myself against > their ssaning? Port 119 is the nntp or news port... grep 119 /etc/services nntp 119/tcp usenet #Network News Transfer Protocol nntp 119/udp usenet #Network News Transfer Protocol man ipfw e.g. ipfw add 5000 deny log ip from 24.0.94.130 to any ---Mike Mike Tancsa (mdtancsa@sentex.net) Sentex Communications Corp, Waterloo, Ontario, Canada "Given enough time, 100 monkeys on 100 routers could setup a national IP network." (KDW2) To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-net" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?38e949fe.348672764>