[63445] in North American Network Operators' Group
Re: Is there anything that actually gets users to fix their computers?
daemon@ATHENA.MIT.EDU (Valdis.Kletnieks@vt.edu)
Mon Oct 6 00:32:09 2003
To: Robert Boyle <robert@tellurian.com>
Cc: Kee Hinckley <nazgul@somewhere.com>, nanog@merit.edu
In-Reply-To: Your message of "Mon, 06 Oct 2003 00:12:07 EDT."
<6.0.0.22.2.20031005010304.04326648@mail1.tellurian.com>
From: Valdis.Kletnieks@vt.edu
Date: Mon, 06 Oct 2003 00:30:35 -0400
Errors-To: owner-nanog-outgoing@merit.edu
--==_Exmh_1956705277P
Content-Type: text/plain; charset=us-ascii
On Mon, 06 Oct 2003 00:12:07 EDT, Robert Boyle <robert@tellurian.com> said:
> What gets me is the moron admins who track down every "attack" they see.
> "Attacks" such as ICMP echo requests, Port 80 connections, etc. If they get
> huge logs that's one thing, but for four pings from a windows box or a
> mistyped IP address in a URL and they are worried about our "attack" These
> bogus reports outnumber legitimate complaints 4:1.
My favorite:
"ntp-1.vt.edu is portscanning me very slowly with source port 123...."
The really sad ones are the ones who 3 days earlier dropped me a note to tell
me they'll using our NTP server.....
--==_Exmh_1956705277P
Content-Type: application/pgp-signature
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.2 (GNU/Linux)
Comment: Exmh version 2.5 07/13/2001
iD8DBQE/gO/rcC3lWbTT17ARAuCQAJ9WUxQDbghteZEXShcBs6t0IqT8LgCgz5Eh
vNh+e3nWqKjgViDkcdanDcE=
=g+Fs
-----END PGP SIGNATURE-----
--==_Exmh_1956705277P--