Re: Can anyone help me ID who is trying to hack my system?

2003-10-03 Thread Rick Moen
Quoting Alderbrook ([EMAIL PROTECTED]): > Can anyone help me identify who is trying to get into my system? > > 9/1/03 7:14:51 PM Deny unknown 1080 TCP 64.222.178.231 64.222.178.231 > 9/1/03 7:14:50 PM Deny unknown 1080 TCP 64.222.178.231 64.222.178.231 > 9/1/03 7:14:49 PM Deny unknown 1080 TCP 64

Re: GET http://someStrangeOrExternalDomain.com

2003-10-03 Thread Bernd Eckenfels
In article <[EMAIL PROTECTED]> you wrote: > Thank you Tom (and thank you François), but is there a way to block users > from Internet to use my server like this? I did some IP range filtering with > iptables, but it is not a "clean" solution, there must be a better way... =) No, you can eighter o

Re: GET http://someStrangeOrExternalDomain.com

2003-10-03 Thread Bernd Eckenfels
In article <[EMAIL PROTECTED]> you wrote: > I found on my apache?s log a lot of messages like > *.*.*.* - - [Date] "GET http://someStrangeOrExternalDomain.com HTP1.0/" 404 > 206 "-" "-" this means, somebody tried, if your host is configured as an proxy. The 404 means you are not vulnerable. The

Re: Can anyone help me ID who is trying to hack my system?

2003-10-03 Thread Noah L. Meyerhans
On Fri, Oct 03, 2003 at 06:45:39PM -0700, Alderbrook wrote: > Can anyone help me identify who is trying to get into my system? > They aren't trying to hack your system. They're just scanning for open proxy ports that they can abuse. This is the sort of issue that, if you run machines on the int

Can anyone help me ID who is trying to hack my system?

2003-10-03 Thread Alderbrook
Can anyone help me identify who is trying to get into my system? 9/1/03 7:14:51 PM Deny unknown 1080 TCP 64.222.178.231 64.222.178.231 9/1/03 7:14:50 PM Deny unknown 1080 TCP 64.222.178.231 64.222.178.231 9/1/03 7:14:49 PM Deny unknown 1080 TCP 64.222.178.231 64.222.178.231 9/1/03 7:14:32 PM Deny

Re: Can anyone help me ID who is trying to hack my system?

2003-10-03 Thread Rick Moen
Quoting Alderbrook ([EMAIL PROTECTED]): > Can anyone help me identify who is trying to get into my system? > > 9/1/03 7:14:51 PM Deny unknown 1080 TCP 64.222.178.231 64.222.178.231 > 9/1/03 7:14:50 PM Deny unknown 1080 TCP 64.222.178.231 64.222.178.231 > 9/1/03 7:14:49 PM Deny unknown 1080 TCP 64

Re: GET http://someStrangeOrExternalDomain.com

2003-10-03 Thread Tom Goulet (UID0)
On Fri, Oct 03, 2003 at 09:57:13PM -0300, Ricardo Abrantes wrote: > Thank you Tom (and thank you François), but is there a way to block users > from Internet to use my server like this? Since Apache is not configured to be a proxy by default, I am sure your server is not seriously being abused.

Re: GET http://someStrangeOrExternalDomain.com

2003-10-03 Thread Bernd Eckenfels
In article <[EMAIL PROTECTED]> you wrote: > Thank you Tom (and thank you François), but is there a way to block users > from Internet to use my server like this? I did some IP range filtering with > iptables, but it is not a "clean" solution, there must be a better way... =) No, you can eighter o

Re: GET http://someStrangeOrExternalDomain.com

2003-10-03 Thread Ricardo
> People are trying to abuse your server in the way you discovered. > However, it seems they are failing, and that Apache is saying "Document > not found" in answer to the odd request. > Thank you Tom (and thank you François), but is there a way to block users from Internet to use my server like t

Re: GET http://someStrangeOrExternalDomain.com

2003-10-03 Thread Ricardo Abrantes
People are trying to abuse your server in the way you discovered. However, it seems they are failing, and that Apache is saying "Document not found" in answer to the odd request. Thank you Tom (and thank you François), but is there a way to block users from Internet to use my server like this?

Re: GET http://someStrangeOrExternalDomain.com

2003-10-03 Thread Bernd Eckenfels
In article <[EMAIL PROTECTED]> you wrote: > I found on my apache?s log a lot of messages like > *.*.*.* - - [Date] "GET http://someStrangeOrExternalDomain.com HTP1.0/" 404 > 206 "-" "-" this means, somebody tried, if your host is configured as an proxy. The 404 means you are not vulnerable. The

Re: Can anyone help me ID who is trying to hack my system?

2003-10-03 Thread Noah L. Meyerhans
On Fri, Oct 03, 2003 at 06:45:39PM -0700, Alderbrook wrote: > Can anyone help me identify who is trying to get into my system? > They aren't trying to hack your system. They're just scanning for open proxy ports that they can abuse. This is the sort of issue that, if you run machines on the int

Can anyone help me ID who is trying to hack my system?

2003-10-03 Thread Alderbrook
Can anyone help me identify who is trying to get into my system? 9/1/03 7:14:51 PM Deny unknown 1080 TCP 64.222.178.231 64.222.178.231 9/1/03 7:14:50 PM Deny unknown 1080 TCP 64.222.178.231 64.222.178.231 9/1/03 7:14:49 PM Deny unknown 1080 TCP 64.222.178.231 64.222.178.231 9/1/03 7:14:32 PM Deny

Re: GET http://someStrangeOrExternalDomain.com

2003-10-03 Thread Tom Goulet (UID0)
On Fri, Oct 03, 2003 at 09:57:13PM -0300, Ricardo Abrantes wrote: > Thank you Tom (and thank you François), but is there a way to block users > from Internet to use my server like this? Since Apache is not configured to be a proxy by default, I am sure your server is not seriously being abused.

Re: GET http://someStrangeOrExternalDomain.com

2003-10-03 Thread Ricardo
> People are trying to abuse your server in the way you discovered. > However, it seems they are failing, and that Apache is saying "Document > not found" in answer to the odd request. > Thank you Tom (and thank you François), but is there a way to block users from Internet to use my server like t

Re: GET http://someStrangeOrExternalDomain.com

2003-10-03 Thread Ricardo Abrantes
People are trying to abuse your server in the way you discovered. However, it seems they are failing, and that Apache is saying "Document not found" in answer to the odd request. Thank you Tom (and thank you François), but is there a way to block users from Internet to use my server like this? I

Re: GET http://someStrangeOrExternalDomain.com

2003-10-03 Thread François TOURDE
Le 12328ième jour après Epoch, Ricardo Abrantes écrivait: > Hello, > I found on my apache´s log a lot of messages like > *.*.*.* - - [Date] "GET http://someStrangeOrExternalDomain.com > HTP1.0/" 404 206 "-" "-" If *.*.*.* is your IP, then it's probably a proxy problem. Otherwise, there is somebo

Re: GET http://someStrangeOrExternalDomain.com

2003-10-03 Thread Tom Goulet (UID0)
On Fri, Oct 03, 2003 at 06:59:38PM -0300, Ricardo Abrantes wrote: > *.*.*.* - - [Date] "GET http://someStrangeOrExternalDomain.com HTP1.0/" 404 > 206 "-" "-" > Does anyone knows what may be causing this? People are trying to abuse your server in the way you discovered. However, it seems they ar

GET http://someStrangeOrExternalDomain.com

2003-10-03 Thread Ricardo Abrantes
Hello, I found on my apache´s log a lot of messages like *.*.*.* - - [Date] "GET http://someStrangeOrExternalDomain.com HTP1.0/" 404 206 "-" "-" I saw on many lists and FAQs some indications that the problem may be caused because of an unconfigured proxy and bad permissions of access, but even

Re: GET http://someStrangeOrExternalDomain.com

2003-10-03 Thread François TOURDE
Le 12328ième jour après Epoch, Ricardo Abrantes écrivait: > Hello, > I found on my apache´s log a lot of messages like > *.*.*.* - - [Date] "GET http://someStrangeOrExternalDomain.com > HTP1.0/" 404 206 "-" "-" If *.*.*.* is your IP, then it's probably a proxy problem. Otherwise, there is somebo

Re: GET http://someStrangeOrExternalDomain.com

2003-10-03 Thread Tom Goulet (UID0)
On Fri, Oct 03, 2003 at 06:59:38PM -0300, Ricardo Abrantes wrote: > *.*.*.* - - [Date] "GET http://someStrangeOrExternalDomain.com HTP1.0/" 404 > 206 "-" "-" > Does anyone knows what may be causing this? People are trying to abuse your server in the way you discovered. However, it seems they ar

GET http://someStrangeOrExternalDomain.com

2003-10-03 Thread Ricardo Abrantes
Hello, I found on my apache´s log a lot of messages like *.*.*.* - - [Date] "GET http://someStrangeOrExternalDomain.com HTP1.0/" 404 206 "-" "-" I saw on many lists and FAQs some indications that the problem may be caused because of an unconfigured proxy and bad permissions of access, but even

Re: ipsec setkey and 2.4.21 kernel

2003-10-03 Thread Mark Devin
Mark Devin wrote: Mark Devin wrote: I have been running a custom compiled 2.4.21 kernel using the kernel source package from Adrian Bunk's site on Woody. I had an ipsec link setup and it was working well using the Kame implementation which debian has backported into the 2.4.21 kernel sources

Re: ipsec setkey and 2.4.21 kernel

2003-10-03 Thread Mark Devin
Mark Devin wrote: Mark Devin wrote: I have been running a custom compiled 2.4.21 kernel using the kernel source package from Adrian Bunk's site on Woody. I had an ipsec link setup and it was working well using the Kame implementation which debian has backported into the 2.4.21 kernel sources.