[Dshield] picnicking under flypaper (or near tar)

Ellen Clary ellen at dgi.com
Wed Mar 13 17:52:59 GMT 2002


> From: "Tim Pierce" <tim at qrsparadigm.com>
> To: <list at dshield.org>
> Subject: RE: [Dshield] yea LaBrea must have moved
> Date: Wed, 13 Mar 2002 09:54:19 -0500
>
> No problem Susan. I actually do "picnic under flypaper" ;-) so to speak, in
> that I run it on the same bastion hosts as my MTAs and VPN servers.

You're braver than I am though it is tempting...


> I also pickup all sorts to RPC portmap requests, DNS version
> queries, etc. to machines that don't exist. I gotta admit I derive a certain
> pleasure from that, knowing that someone out there if being frustrated, or
> wondering what the heck is going on when a portmapper scan that should take
> only an instant to complete hangs for twenty or thirty minutes if not
> indefinitely.

You know it just occurred to me that you're taking about a DoS aimmed at
crackers.  Amusing.

Ellen Clary




More information about the list mailing list