Article View: aus.computers.linux
Article #47537REQ : Security & email header forging info
From: Mediocrates
Date: Fri, 08 Jan 1999 00:00
Date: Fri, 08 Jan 1999 00:00
32 lines
2189 bytes
2189 bytes
I've been wandering around the HOWTO and doc files that came with my
linux box, and have a couple of questions that I can't find the answers
to.
Firstly, I've been reading that hackers use other people's machines to
host attacks on other machines. What makes Windows more suseptible to
this than Linux(apart from the obvious "MS wrote it" answer, I mean
specifically)? And how can I ensure that my linux box doesn't get used
for this(aside from the logging messages produced from telnet & ftp
sessions)? Do any of the sys admins out there have any tips on beefing
up remote security?
Secondly, with the onset of mass spam in newsgroups and email, spammers
appear to be getting sneakier, in that they now forge headers to their
messages, making it damn near impossible to track them down. How do they
do this? From memory, it has something to do with telnetting into an
ethernet port(?), but how do they go about forging headers? Also, do any
sys admins or others out there have any tips for tracking them down to
their real ip's? I've used traceroute to check if the return path of
incoming mail is kosher, but is there a better way of doing this?
I'm hoping for some serious suggestions, so flame-boys and trolls need
not apply.
Thanks,
Matt.
--
"Every program has at least one bug and can be shortened by at least one
instruction -- from which, by induction, one can deduce that every
program can be reduced to one instruction which doesn't work."
-- Anon.
Technical Details
Message-ID:
<LPel2.155$FY1.5883@nsw.nnrp.telstra.net>Path:
arc1-ca.pugleaf.net!unknown!not-for-mailShow Full Headers
Complete Article Headers
X-Google-Language: ENGLISH,ASCII-7-bit X-Google-Thread: 102983,bc2d7f77ff5364c2,start X-Google-Attributes: gid102983,public From: Mediocrates <Mediocrates@don'tbother.spammingme> Subject: REQ : Security & email header forging info Date: 1999/01/08 Message-ID: <LPel2.155$FY1.5883@nsw.nnrp.telstra.net> X-Deja-AN: 430050424 Content-Transfer-Encoding: 7bit Content-Type: text/plain; charset=us-ascii X-Complaints-To: abuse@telstra.net X-Trace: nsw.nnrp.telstra.net 915765611 203.24.76.190 (Fri, 08 Jan 1999 14:20:11 EST) Organization: Why Me? Inc. MIME-Version: 1.0 NNTP-Posting-Date: Fri, 08 Jan 1999 14:20:11 EST Newsgroups: aus.computers.linux