-----BEGIN PGP SIGNED MESSAGE-----
Newcomb, Kelly writes:
> I'm getting repeated (regular intervals) ftp attempts to my firewall from an
> address (208.24.82.140) that I can't seem to track down. While the attempts
> are being blocked, the continuing log messages are annoying. This has been
> going on for quite a while now, and I'm wondering if something got caught in
> a loop and the attempts may not be malicious. (on the other hand... 8-O)
> Any thoughts?
>
I don't remember the exact details, but about 5 years back though a
weird combination of Hardware, Net Configuration, and DNS, I came
across an accidental denial of service attack. My home machine was
connected via 9600 modem to work. Work was connected to the Internet
via a T1. I started receiving connections requests for a high port at
home. These requests were filling up my [um] big modem pipe at the
time. To make a long story short. These requests were also piling up
at our Internet router, eventual causing it to crash. The attack
originated from a company that had had a service running on that port.
They stopped using it, and took down the server. They forgot to turn
the clients off, and for some reason the clients started resolving my
home box as the server.
So anyhow, I at least know all attacks are not necessarily malicious.
- --
- ------------------------------------------------------------
Christopher A. Stewart
Unix and Linux Net Admin Consultant.
(206)-729-7321
(Pgp and gpg public keys can be found at
http://www.xopheria.org/~allan/pgp.html)
-----BEGIN PGP SIGNATURE-----
Version: 2.6.2
Comment: Processed by Mailcrypt 3.5.4, an Emacs/PGP interface
iQCVAwUBN83ahBwnuTOOphjRAQF8VgP+Jqib1Umhk/Gh+qmCMHu7Xv9EEMRBFIQH
xt5vxGvpLrvuVSXyEIaZuvTLptroA1zYq6i9GXLGOf+Hd8D9pT1QEpjSdetyR35U
Ql0uSXXEpVvt1rEIHgRyUqlelWUcE1QzttyaiNkow6UhTMJ5MrX0FqBIv4KtTJJT
1YXUPSfLeDg=
=28w2
-----END PGP SIGNATURE-----
-
[To unsubscribe, send mail to [EMAIL PROTECTED] with
"unsubscribe firewalls" in the body of the message.]
