Not if it's waiting on a response from the victim and immediately resending.
That's harder to automatically recognize and guard against. A PING flood, otoh...
Besides, it wasn't clear that the attack was sustained or in spurts, which could
have raise the effective frequency.
-Chip-
On 7/8/0
I put the initial installation on the maintenance volumes (5xxW01,
5xxW02, etc) and then copy the necessary minidisks to my production
volumes (VMxRES, VMxnnn, etc). On my system, the 5xxRES, 5xxWnn volumes
belong to my maintenance system that I run second level. If I inherited
an existing system u
I place mine on one of the two mentioned disks in your posting. My
reason is that we use DDR to backup the SYSRES packs (SYSRES packs, all
disk drives needed for initial restore at our disaster recover site). I
haven't looked at DFSMS in a while but some of the files MUST reside on
the SFS (Share
>>> On 7/8/2009 at 2:55 PM, Chip Davis wrote:
> 2,500 tries over 2 hours is not an attempt to break in, that's a
> denial-of-service attack.
One attempt every 3 seconds (roughly)? I doubt it. Sounds like a script
kiddie to me.
Mark Post
Hello Everyone,
There have been major attacks on South Korea and other government sites
over the world. You may have been caught up in it.
Ed Martin
Aultman Health Foundation
330-363-5050
ext 35050
-Original Message-
From: The IBM z/VM Operating System [mailto:ib...@listserv.uark.edu] O
When installing DFSMS/VM RMSONLY, where does one usually place the
minidisks described in Chapter 5 of the Program Directory? On the system
5xxw01/5xxw02 or on an installation defined volume? Looking for help with
best practices...
Joseph Di Pippo
Operating Systems Programmer III
FRIT Computin
Ladies, gentlemen: Enough, please. In the immortal words of my father
during long family road trips, please "don't make me have to pull this
car over to the side of the road!"
Pretty please?
-dan.
> Easy for you to say.
Sent Jim a set of iptables rules that should do the job.
Would anyone else find a VM-based "screening"/firewall virtual machine useful?
Would you contribute time or money to it's creation? If so, let me know
off-list and I'll see what we can coordinate. We've been runnin
I've seen logon attacks thru FTPSERVE before and, as I remember,
looking at the FTPSERVE console showed the activity. I've seen 3
different attempts in the last couple of weeks and the FTPSERVE console
doesn't show a thing.
Jim
Adam Thornton wrote:
On Jul 8, 2009, at 11:15 AM, David Boyes
2,500 tries over 2 hours is not an attempt to break in, that's a
denial-of-service attack.
Apparently there was a pretty big DOS attack on a number of Federal and other
websites starting on July 4. They hit a ton of sites, and if you stayed up, you
did better than the Treasury Department, Sec
Has anyone tried a non-IBM maintenance provider for one of the IBM DS disk
subsystems? Are there companies that do this?
Our 4 year warranty is up on our IBM DS6800. We are required to go out on
bids, if it makes sense. It only makes sense, to spend the XX hours for the
bid process, if t
Ethan Lanz wrote:
At which point it was "released" as Day 1! :)
You win!
--
Jack J. Woehr# I run for public office from time to time. It's like
http://www.well.com/~jax # working out at the gym, you sweat a lot, don't get
http://www.softwoehr.com # anywhere, and you fall asleep eas
I will be out of the office starting 07/08/2009 and will not return until
07/13/2009.
Contact Les Geer in my absence at 607-429-3580 (T/L 620) or my manager,
Nick Pianella (607-429-5343 (T/L 620). If an emergency, call my cell at
704-886-7039 if you need to reach me.
At which point it was "released" as Day 1! :)
On Wed, Jul 8, 2009 at 11:54 AM, Jack Woehr wrote:
> Schuh, Richard wrote:
>
>> Only if you are counting bits, bytes, words, etc., and then only if it is
>> an offset you are counting. Who thought of using offset instead of ordinal
>> numbers, anyway
On Jul 8, 2009, at 12:03 PM, Jim Bohnsack wrote:
Easy for you to say.
How about "She sells sea shells by the seashore?"
Adam
I very cleverly log from 06:00 until 18:00. Saves space in the HISTLOG
files, you know. :-[
Jim
Rich Smrcina wrote:
Jim Bohnsack wrote:
We saw a bunch of logon attempts a night ago to userid ADMINIST which
I do not have defined in the directory. There were about 2,500 over
t
> z/OS being the current
> poster
> child
I can just see the rain-drenched vista of the Poughkeepsie IBM plant in the
poster with a soaking wet z10 sitting on the lawn out front, with the word
"Give." in a big white square at the bottom of the poster.
-- db
On Jul 8, 2009, at 11:15 AM, David Boyes wrote:
Simple answer: put a Linux guest in front of the VM TCP stack with
the old address as the external address, renumber the VM stack to a
RFC1918 address on an internal guest lan, and enable IP Masquerade
in iptables. That gets you all sorts of u
On Jul 8, 2009, at 11:15 AM, David Boyes wrote:
Simple answer: put a Linux guest in front of the VM TCP stack with
the old address as the external address, renumber the VM stack to a
RFC1918 address on an internal guest lan, and enable IP Masquerade
in iptables. That gets you all sorts of u
Easy for you to say.
Jim
David Boyes wrote:
Simple answer: put a Linux guest in front of the VM TCP stack with the old =
address as the external address, renumber the VM stack to a RFC1918 address=
on an internal guest lan, and enable IP Masquerade in iptables. That gets =
you all sorts of
Dearest colleagues:
The ongoing discussion has, I think, served to prove what I have
believed all along: That we are, each and every one of us,
exceptionally clever, witty, well-read and profoundly insightful
individuals. If you will forgive the interruption, may I humbly suggest
that this
Simple answer: put a Linux guest in front of the VM TCP stack with the old
address as the external address, renumber the VM stack to a RFC1918 address on
an internal guest lan, and enable IP Masquerade in iptables. That gets you all
sorts of useful info, and lets you shut them down cold. Add one
Schuh, Richard wrote:
Only if you are counting bits, bytes, words, etc., and then only if it is an
offset you are counting. Who thought of using offset instead of ordinal
numbers, anyway?
The Almighty started on the zero'th day. After he did his work, the
earth was without form and void, and
On Wednesday, 07/08/2009 at 10:37 EDT, RPN01 wrote:
> If I remember the story correctly, you won't see a version such as 6.0,
> because in IBM wisdom, this would imply that there would be following
> releases (due to the decimal). Now why it's ok to have 6.1, and why that
> doesn't carry the same
Only if you are counting bits, bytes, words, etc., and then only if it is an
offset you are counting. Who thought of using offset instead of ordinal
numbers, anyway?
Regards,
Richard Schuh
> -Original Message-
> From: The IBM z/VM Operating System
> [mailto:ib...@listserv.uark.ed
I will be out of the office starting 07/08/2009 and will not return until
07/18/2009.
I will be out of the office on July 8th returning July 19th. If your
matter is urgent, please contact John Sutera at 913 535 5133 through
Wednesday, July 15th and for the 16th and 17th contact Karin Broecker
On Wednesday, 07/08/2009 at 09:53 EDT, jose raul baron
wrote:
> Hi list, we are having lots of trouble on defining a new type B IP
addresswith
> subnetting under z/VM 4.4
>
> Net Address: 172.24.131.160
> Netmask: 255.255.255.224 = 27mask bits
> Wildcard:0.0.0.31
>
> Minimum IP address: 172
Ethan Lanz wrote:
The first release of each version is necessarily "Release 1."
To people who learned programming from Rexx.
To those of us who use assembler, Forth, C, Java, it would be Release 0 :)
--
Jack J. Woehr# I run for public office from time to time. It's like
http://ww
Um - z/OS V1 R 1-10 to this point.
On Wed, Jul 8, 2009 at 11:12 AM, Ethan Lanz wrote:
> IBM's use of V6.1 is shorthand for Version 6 Release 1. The first release
> of each version is necessarily "Release 1." What IBM avoids (IIRC) is
> *Version* 1, as that implies a future version, presumab
Jim Bohnsack wrote:
We saw a bunch of logon attempts a night ago to userid ADMINIST which
I do not have defined in the directory. There were about 2,500 over
the course of 2 hours. They were apparently not coming in thru an
emulator, so that pretty much leaves the web interface to Performance
IBM's use of V6.1 is shorthand for Version 6 Release 1. The first release
of each version is necessarily "Release 1." What IBM avoids (IIRC) is
*Version* 1, as that implies a future version, presumably with substantial
upgrades.
On Wed, Jul 8, 2009 at 10:35 AM, RPN01 wrote:
> If I remember the
We saw a bunch of logon attempts a night ago to userid ADMINIST which I
do not have defined in the directory. There were about 2,500 over the
course of 2 hours. They were apparently not coming in thru an emulator,
so that pretty much leaves the web interface to Performance Toolkit. Is
there
If I remember the story correctly, you won't see a version such as 6.0,
because in IBM wisdom, this would imply that there would be following
releases (due to the decimal). Now why it's ok to have 6.1, and why that
doesn't carry the same implication, I don't know.
--
Robert P. Nix Mayo F
Mike Walter wrote:
>For that matter, z/VM Version 6.1? What happened to Version 6.0? Doesn't
>everyone know that odd-numbered versions are considered unlucky?
Can't have Version 6 Release 0 ... ya know?
...phsiii
Hi list, we are having lots of trouble on defining a new type B IP address
with subnetting under z/VM 4.4
Net Address: 172.24.131.160
Netmask: 255.255.255.224 = 27 mask bits
Wildcard:0.0.0.31
Minimum IP address: 172.24.131.161
Maximum IP address: 172.24.131.190
Broadcast address: 172.24.131.191
T
35 matches
Mail list logo