Thanx for your information, I edited /etc/inetd.conf and #killall -HUP inetd
hopefully that did it for that.
How can i check for a buffer overflow ?
Also, what are some good network security programs? Im sure there are some
built into slakware that i dont know about yet. anything other than
# tail -f /var/log/messages
??
Thanx again.
On 15-Dec-98 Tony Nugent wrote:
> On Mon Dec 14 1998 at 15:09, [EMAIL PROTECTED] wrote:
>
> don't use a Reply-To header in your messages (unless there is a *very*
> good reason for doing so)
>
>> Just recenlty i had some attacks, luckily the didnt get in and hose up my
>> system, but here the log messages ...
>> c 14 02:27:04 pfreak imapd[713]: connect from unknown
>> Dec 14 02:42:57 pfreak imapd[722]: connect from 208.154.159.123
>
> If you are not acting as an imap server, turn it off in
> /etc/inetd.conf (along with any other daemons that you don't want
> running, eg, pop).
>
>> Dec 14 02:43:01 pfreak imapd[722]: Login failure
>> user=^?^?^?^?^?^?^?^?^?^?^?^?^?
>> ^?^?^?^?^?^?^?^?^?^?^?^?^?^?^?^?^?^?^?^?^?^?^?^?^?^?^?^?^?^?^?^?^?^?^?^?^?^?^
>> ?^?
>
> [...etc...]
>
>> what the crap ?
>
> It's probably looking for a buffer overflow bug. Did they find one?
> (You better check...)
>
>> I also wonder how it is that they got my IP address,
>
> Probably did some network scanning and found someone at your IP
> address and the daemon listening on that port. This is not uncommon.
>
>> I was not
>> in IRC. So I wonder how that could be.Anyone has any infoon this stuff and
>> network security let me know ..
>
> Check the usenet security newsgroups and look for their FAQs at
> rtfm.mit.edu
>
> Cheers
> Tony
> -=*#*=-=*#*=-=*#*=-=*#*=-=*#*=-=*#*=-=*#*=-=*#*=-=*#*=-=*#*=-=*#*=-
> Tony Nugent <[EMAIL PROTECTED]> <[EMAIL PROTECTED]>
> Computer Systems Officer Faculty of Science
> University of Southern Queensland, Toowoomba Oueensland Australia
> -=*#*=-=*#*=-=*#*=-=*#*=-=*#*=-=*#*=-=*#*=-=*#*=-=*#*=-=*#*=-=*#*=-
----------------------------------
E-Mail: [EMAIL PROTECTED]
Date: 15-Dec-98
Time: 18:18:06
"Linux: for people with an IQ higher than 95' or 98'"
----------------------------------