[21987] in North American Network Operators' Group

home help back first fref pref prev next nref lref last post

Re: identify hostname

daemon@ATHENA.MIT.EDU (Brandon Ross)
Mon Nov 30 20:40:21 1998

Date: Mon, 30 Nov 1998 20:21:15 -0500 (EST)
From: Brandon Ross <bross@mindspring.net>
To: Dan Hollis <goemon@sasami.anime.net>
cc: nanog@merit.edu
In-Reply-To: <Pine.LNX.3.96.981130170845.25864A-100000@sasami.anime.net>

On Mon, 30 Nov 1998, Dan Hollis wrote:

> On Mon, 30 Nov 1998, Brandon Ross wrote:
> > 1Cust76.tnt1.sfo2.da.
> 
> Id say that looks like uunet. Again. Sigh.
> 
> UUnet uses ascend TNT's which they claim you cant filter 
> directed-broadcast on. Ive ranted at them since October 20 to get this
> serious security hole closed.

I've been yelling at them about that as well as not being able or willing
to reverse trace spoof attacks.  This attack, however, would not have been
stopped by such filters, this is just the address that someone used to
break into a server with.

Thanks for your help.

Brandon Ross            Network Engineering     404-815-0770 800-719-4664
Director, Network Engineering, MindSpring Ent., Inc.  info@mindspring.com
                                                            ICQ:  2269442

Stop Smurf attacks!  Configure your router interfaces to block directed
broadcasts. See http://www.quadrunner.com/~chuegen/smurf.cgi for details.


home help back first fref pref prev next nref lref last post