Is my ISP hacked (II)?

1999-04-24 Thread Manel Marin
Hello again, Ops, I forgot to explain you my ISP tries to connect me to port 113 (auth) two or four times every time I send messages with smail. This port is about NIS/NIS+ domain issues, isn't it? - smail? - attack? - hacked? - paranoid? (me) Alot of thanks and best regards, --

Is my ISP hacked?

1999-04-24 Thread Manel Marin
Hello again, I have a linux box with a firewall masquerading for a Windoze net, and last week I decided to log any attempt to connect me, and... I suspect my ISP is hacked... I receive from their secondary DNS three ping (ICMP/8) every about ten minutes, this makes my ppp does not disconnect by

Re: IP fw-in deny (?)

1999-04-24 Thread Manel Marin
On Thu, Apr 22, 1999 at 08:00:00PM -0400, Paul Tod Rieger wrote: Just to be clearer, the typical message looks like: kernel: IP fw-in deny eth0 UDP 192.168.4.1:68 255.255.255.255:67 L=328 S=0x00 I=53838 F=0x T=128 Everytime I connect to inet through Infovia plus (Spain) I got this:

Weird ICMP packets being logged

1999-04-24 Thread Andrew Stribblehill
I'm having a bizarre set of ICMP packets coming to me, of the Destination Unreachable type. This seems to happen every minute or so, even when nobody is logged in. My question for you is: How can I find out why these are happening? Presumably they are in some way due to what my box is doing, but

Re: IP fw-in deny (?)

1999-04-24 Thread Dean Carpenter
This is not tunneling. These are DHCP requests coming in over your ppp line. That is, other (usually Winders) machines looking for an IP configuration to be given to them. The ISP should not be forwarding these to you. Tell them to stop. If they don't, you can do a couple of things. Make a