Article View: comp.security.firewalls
Article #93Re: Local servers used in attack on Whitehouse.
From: Barry Margolin
Date: Tue, 08 May 2001 14:57
Date: Tue, 08 May 2001 14:57
20 lines
2650 bytes
2650 bytes
In article <5jvfftk6dilfat1mgaqsfn6njiutm51svn@news.sonic.net>, Jester � <Jester's Cat.> wrote: >I am a genuity customer and have seen time and time again, genuity ip's showing >up in my firewall logs, further checking reveals these boxes to be wide open >servers being operated by adsl customers, sending reports to security does not >seem to be getting these boxes either secured or shut down, because they are >seen a few days later involved in more port scans, if security would take the >pro-active approach and shut these boxes down that would be one less launching >point these idiots could be exploiting. I'm not very familiar with our ADSL business, but we we don't sell ADSL directly to consumers. We mostly sell wholesale services to resellers, so I think that all we can do with complaints like this is forward them to the appropriate reseller. -- Barry Margolin, barmar@genuity.net Genuity, Burlington, MA *** DON'T SEND TECHNICAL QUESTIONS DIRECTLY TO ME, post them to newsgroups. Please DON'T copy followups to me -- I'll assume it wasn't posted to the group.
Technical Details
Message-ID:
<qPTJ6.5$v86.307@burlma1-snr2>Path:
arc1-ca.pugleaf.net!newsfeed.google.com!newsfeed.stanford.edu!news-spur1.maxwell.syr.edu!news.maxwell.syr.edu!cpk-news-hub1.bbnplanet.com!news.gtei.net!burlma1-snr2!not-for-mailReferences:
<9d6bit$ooh$1@caerulus.cerintha.com> <TGyJ6.3$Bv4.279@burlma1-snr2> <5jvfftk6dilfat1mgaqsfn6njiutm51svn@news.sonic.net>Show Full Headers
Complete Article Headers
X-Google-Language: ENGLISH,ASCII X-Google-Thread: f922c,bef6ca6a36007f08 X-Google-Attributes: gidf922c,public X-Google-Thread: 10090f,bef6ca6a36007f08 X-Google-Attributes: gid10090f,public X-Google-Thread: ff723,bef6ca6a36007f08 X-Google-Attributes: gidff723,public X-Google-Thread: 1122a6,bef6ca6a36007f08 X-Google-Attributes: gid1122a6,public X-Google-ArrivalTime: 2001-05-08 07:57:28 PST Path: arc1-ca.pugleaf.net!newsfeed.google.com!newsfeed.stanford.edu!news-spur1.maxwell.syr.edu!news.maxwell.syr.edu!cpk-news-hub1.bbnplanet.com!news.gtei.net!burlma1-snr2!not-for-mail From: Barry Margolin <barmar@genuity.net> Newsgroups: comp.security.firewalls,bellsouth.net.security,bellsouth.net.support.adsl,comp.security.misc Subject: Re: Local servers used in attack on Whitehouse. References: <9d6bit$ooh$1@caerulus.cerintha.com> <TGyJ6.3$Bv4.279@burlma1-snr2> <5jvfftk6dilfat1mgaqsfn6njiutm51svn@news.sonic.net> Organization: Genuity, Cambridge, MA Mail-Copies-To: never X-Newsreader: trn 4.0-test72 (19 April 1999) Originator: barmar@genuity.net (Barry Margolin) Lines: 20 Message-ID: <qPTJ6.5$v86.307@burlma1-snr2> X-Trace: /Kkf2K+RjwE9+EFddomBNozJIQrXvMxhpzdsAUvTheRHs+P+a9vBZQjuBeFiwxzKWXOyYduEawUw!ajpHMho1otQj2YS8BOdeSBrfu6n8A/Um1XlsboHjJdyAF3AJ9iq2Rx4+ X-Complaints-To: abuse@genuity.net X-Abuse-Info: Please be sure to forward a copy of ALL headers X-Abuse-Info: Otherwise we will be unable to process your complaint properly NNTP-Posting-Date: Tue, 08 May 2001 14:57:26 GMT Distribution: world Date: Tue, 08 May 2001 14:57:27 GMT