🚀 go-pugleaf

On Wed, 08 Nov 2000, Gary wrote in various dribble:
>The following person (who posts on the above newsgroups)has been detected by
>my firewall as attempting to hack into my system. He/she has been reported
>to the isp concerned and details are as follows.

I think you really have to put things into proper perspective here.
Quite often people scan a group of IPs looking for the last person to occupy
that address. Maybe they want to play a game, maybe something a little more
serious but the fact is... Your firewall is there to stop them unless you give
your permission.

The best thing to do is just chill out... System administrators turn off the
monitoring facility of firewalls once they are satisfied their rules work...
What about you?
Yogi

On Wed, 8 Nov 2000 19:27:58 +1000, yogi <yogi@herveybay.to> wrote, in
part:

>The best thing to do is just chill out... System administrators turn off the
>monitoring facility of firewalls once they are satisfied their rules work...

One is never sure that a firewall always works: monitoring is used to
find out what has happened in case an attack is ever successful. And
fewer computers would be hacked, the more deterrence existed for
attempts to make unauthorized use of them.

John Savard
http://home.ecn.ab.ca/~jsavard/crypto.htm

John Savard <jsavard@fNrOeSePnAeMt.edmonton.ab.ca> wrote:
>On Wed, 8 Nov 2000 19:27:58 +1000, yogi <yogi@herveybay.to> wrote, in
>part:
>>The best thing to do is just chill out... System administrators turn
>>off the monitoring facility of firewalls once they are satisfied their
>>rules work...
>
>One is never sure that a firewall always works: monitoring is used to
>find out what has happened in case an attack is ever successful. And
>fewer computers would be hacked, the more deterrence existed for
>attempts to make unauthorized use of them.

True, but not every access is malicious. The original poster just
asserted that his firewall had detected a cracking attempt, but gave no
details. For all we know it could be somebody telnetting to port 80.
Without more evidence I'm sceptical; people who panic to Usenet about
every portscan obviously haven't run an Internet-connected firewall for
long.

Er, followups somewhere else. To poster will do.

-- 
Colin Watson                                     [cjw44@flatline.org.uk]
"And I forgot the next verse / Oh well, I guess it pays to rehearse
 The music sheet's so hard to find / What are the words? Oh nevermind"
  - "Smells Like Nirvana", Weird Al

In article <3a0884ad$0$19405$7f31c96c@news01.syd.optusnet.com.au>, "Gary"
<123456789@one.net.au> wrote:

> The following person (who posts on the above newsgroups)has been
> detected by my firewall as attempting to hack into my system. He/she has
> been reported to the isp concerned and details are as follows.
> 
> Name E-mail address Date Thread Newsgroup Vic Drastik
> 1234567829@one.net.au 00/04/20  comp.lang.basic.misc Mongolian Horde
> ghengis_khan@hotmail.com 00/01/05  alt.surfing
> *Lauren* Lsn@hotmail.com 99/11/06  alt.music.moffatts
> Mongolian Horde ghengis_khan@hotmail.com 99/11/05  alt.surfing Mongolian
> Horde ghengis_khan@hotmail.com 99/11/05 Location of 203.101.94.94:
>    Country   =  Australia Region    =  New South Wales City      = 
>    Sydney
> Standard network info
> [ nslookup (1): ip=203.101.94.94,
> hostname=async93-wol-isp-1.nas.one.net.au]

Most likely a skript kiddy trying to look cool.
Can you paste your logfile on here, as i'm interested in knowing what
exactly this "hacker/cracker" did.



-- 
Carsten Bauer
numloxxREMOVE@MEdingoblue.net.au
PGP Key - http://members.dingoblue.net.au/~numloxx/pgp.asc

The only time I even get mildly annoyed by firewall alerts any more is
when I see a service like Netbus, Sun/RPC Portmap, Telnet, or
"Unknown".  Then I just click the Block button and forget about it.

John M.

"Gary" <123456789@one.net.au> wrote in message
news:3a0884ad$0$19405$7f31c96c@news01.syd.optusnet.com.au...
> The following person (who posts on the above newsgroups)has been detected
by
> my firewall as attempting to hack into my system. He/she has been reported
> to the isp concerned and details are as follows.
>
> Name E-mail address Date Thread Newsgroup
> Vic Drastik 1234567829@one.net.au 00/04/20  comp.lang.basic.misc
> Mongolian Horde ghengis_khan@hotmail.com 00/01/05  alt.surfing
> *Lauren* Lsn@hotmail.com 99/11/06  alt.music.moffatts
> Mongolian Horde ghengis_khan@hotmail.com 99/11/05  alt.surfing
> Mongolian Horde ghengis_khan@hotmail.com 99/11/05
> Location of 203.101.94.94:
>    Country   =  Australia
>    Region    =  New South Wales
>    City      =  Sydney
> Standard network info
> [ nslookup (1): ip=203.101.94.94,
hostname=async93-wol-isp-1.nas.one.net.au]
>


Thanks for the warning, however next time please use the correct
terminology.  This person is a cracker, not a hacker.  Please refer to the
jargon file www.tuxedo.org/~esr or the printed (slightly out of date)
version, "The new hacker dictionary".

Cheers
--
Michael - please change puddle to pond to reply

Sorry about that Mr hoarde...........................
I was useing "you" as an alias whilst roaming around the country side the
other day...........;)

madrat
X X X

Talking about things gettin out of hand. And Toataly OFF topic
Greg

Gary <123456789@one.net.au> wrote in message
<3a0884ad$0$19405$7f31c96c@news01.syd.optusnet.com.au>...
>The following person (who posts on the above newsgroups)has been detected
by
>my firewall as attempting to hack into my system. He/she has been reported
>to the isp concerned and details are as follows.
>
>Name E-mail address Date Thread Newsgroup
>Vic Drastik 1234567829@one.net.au 00/04/20  comp.lang.basic.misc
>Mongolian Horde ghengis_khan@hotmail.com 00/01/05  alt.surfing
>*Lauren* Lsn@hotmail.com 99/11/06  alt.music.moffatts
>Mongolian Horde ghengis_khan@hotmail.com 99/11/05  alt.surfing
>Mongolian Horde ghengis_khan@hotmail.com 99/11/05
>Location of 203.101.94.94:
>   Country   =  Australia
>   Region    =  New South Wales
>   City      =  Sydney
>Standard network info
>[ nslookup (1): ip=203.101.94.94,
hostname=async93-wol-isp-1.nas.one.net.au]
>
>
>