[99863] in RedHat Linux List

home help back first fref pref prev next nref lref last post

Re: security advice requested

daemon@ATHENA.MIT.EDU (Greg Fall)
Tue Nov 17 11:27:37 1998

Date: Tue, 17 Nov 1998 11:24:47 -0500 (EST)
From: Greg Fall <gmf@dweezil.dyn.ml.org>
To: "Fred W. Noltie Jr." <criterion-consulting@usinternet.com>
cc: redhat-list@redhat.com, recipient list not shown: ;
In-Reply-To: <199811171607.IAA10467@belvdere.vip.best.com>
Resent-From: redhat-list@redhat.com
Reply-To: redhat-list@redhat.com

Let me get this straight:  somebody tried to telnet four (was it four?)
times, apparently by hand, onto your machine, then gave up.  You could
call me the devil's advocate, but is it fair to tag such a person as a
cracker and go after them?  I've failed telnet attempts four times in a
row because my fingers were cold and I typed badly; sometimes I've even
given the incorrect address, thereby attempting, repeatedly, to telnet
into a totally foreign machine.  It certainly would have spoiled my day
if there had been an Internet gestapo coming down on me for it.

I'm not trying to be a smarty here, and I don't know what exactly
this looks like in your logs, but I think you should be pretty convinced
that they illustrate an aggressive and malicious attempt to gain access 
to your computer before you begin reporting it as an incident.  .02

GF

--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--
    ___
   /.  \    Gregory Fall                Phone: 734-913-4662
   \/  /    University of Michigan      Fax:   734-763-7130
     \ \    2455 Hayward Street         email: gmfall@engin.umich.edu
   __/_/    Ann Arbor, MI 48109                gmf@dweezil.dyn.ml.org



-- 
  PLEASE read the Red Hat FAQ, Tips, Errata and the MAILING LIST ARCHIVES!
		http://www.redhat.com http://archive.redhat.com
         To unsubscribe: mail redhat-list-request@redhat.com with 
                       "unsubscribe" as the Subject.


home help back first fref pref prev next nref lref last post