[Dshield] Firewall or other security tool that bites back???

E.B. Dreger eddy+public+spam at noc.everquick.net
Mon Nov 18 17:36:23 GMT 2002


rb> Date: Mon, 18 Nov 2002 06:33:02 -0800 (PST)
rb> From: rilya byor


rb> I've had it with these port 137 probes--I just logged
rb> 27 in the last 3 minutes, after which my connection
rb> locked up AGAIN.  Does anybody know if there's a
rb> Windows program that can be set up to listen on port
rb> 137 and automatically shoot back???

1. As Bjorn said: bad idea
2. Consider that the source may be spoofed.  Even on TCP, it's
   not difficult with easy-to-predict ISN, which plagues some
   versions of Windows.

Firewall the traffic and be done with it.


Eddy
--
Brotsman & Dreger, Inc. - EverQuick Internet Division
Bandwidth, consulting, e-commerce, hosting, and network building
Phone: +1 (785) 865-5885 Lawrence and [inter]national
Phone: +1 (316) 794-8922 Wichita

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Date: Mon, 21 May 2001 11:23:58 +0000 (GMT)
From: A Trap <blacklist at brics.com>
To: blacklist at brics.com
Subject: Please ignore this portion of my mail signature.

These last few lines are a trap for address-harvesting spambots.
Do NOT send mail to <blacklist at brics.com>, or you are likely to
be blocked.




More information about the list mailing list