[unisog] Help on Possible Web Mail Attack

Valdis.Kletnieks@vt.edu Valdis.Kletnieks at vt.edu
Thu Jun 16 15:43:48 GMT 2005


On Thu, 16 Jun 2005 16:40:50 +1000, Tim Lane said:

> [16/Jun/2005:10:11:01 +1000] boson httpd[8402]: General Warning: ipsecurity
> - client 10.133.25.9 attempted to use session 6FmTS7qLDiU belonging to
> 64.233.172.2
> 
> The 64.233 address actually resolves back to Google........

Anybody want to place bets that 10.133.25.9 actually *was* the other end
of session 6FmTS7qLDiU, and that something failed to translate across the NAT?
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 226 bytes
Desc: not available
Url : http://www.dshield.org/pipermail/unisog/attachments/20050616/609d8cd7/attachment.bin


More information about the unisog mailing list