Article View: comp.security.misc
Article #96Re: Pleasure.com mystery solved.
From: Brian 'Doc' O'Neill
Date: Tue, 04 Aug 1992 13:41
Date: Tue, 04 Aug 1992 13:41
20 lines
1879 bytes
1879 bytes
In article <1992Aug04.030626.18301@anomaly.sbs.risc.net>, kd1hz@anomaly.sbs.risc.net (Michael P. Deignan (KD1HZ)) writes: |> That's right... *IF* I expect people to be able to address my machine as |> "pleasure.com". If I don't, I can call it whatever I want to. |> But that raises the concerns that sparked this whole thing off...by doing an inverse mapping to an invalid name, you in a sense "cover" your tracks, as all the logs (unless someone uses a modified logger) list the site as the name instead of the address, and the name cannot be mapped back. Now, I happen to do a last on my system, and see tons of ftp sessions to several users accounts from a site whose name cannot be traced. Do I just sit back and wonder what is going on or do I try and figure it out? I simply slip in a new ftpd with better logging and see what comes out. Then, with that information in hand I begin to find out... ======================================================================= Brian O'Neill - Systems Manager, Computer Science (508) 934-3645 University of Massachusetts at Lowell Internet: oneill@ulowell.edu Moderator, comp.binaries.ibm.pc
Technical Details
Message-ID:
<1992Aug4.134109.18563@ulowell.ulowell.edu>Path:
arc1-ca.pugleaf.net!sparky!uunet!ulowell!oneillReferences:
<1992Jul27.135126.1626@drycas.club.cc.cmu.edu> <1992Jul28.203324.15206@uwm.edu> <xKV-d9#@engin.umich.edu> <3157@ra.nrl.navy.mil> <1992Jul29.215824.16932@anomaly.sbs.risc.net> <1992Aug3.024429.16013@melba.bby.oz.au> <1992Aug04.030626.18301@anomaly.sbs.risc.net>Show Full Headers
Complete Article Headers
Newsgroups: comp.security.misc Path: arc1-ca.pugleaf.net!sparky!uunet!ulowell!oneill From: oneill@cs.ulowell.edu (Brian 'Doc' O'Neill) Subject: Re: Pleasure.com mystery solved. Message-ID: <1992Aug4.134109.18563@ulowell.ulowell.edu> Originator: oneill@bigmax.ulowell.edu Sender: usenet@ulowell.ulowell.edu (News manager - ulowell) Organization: University of Massachusetts at Lowell Computer Science References: <1992Jul27.135126.1626@drycas.club.cc.cmu.edu> <1992Jul28.203324.15206@uwm.edu> <xKV-d9#@engin.umich.edu> <3157@ra.nrl.navy.mil> <1992Jul29.215824.16932@anomaly.sbs.risc.net> <1992Aug3.024429.16013@melba.bby.oz.au> <1992Aug04.030626.18301@anomaly.sbs.risc.net> Date: Tue, 4 Aug 1992 13:41:09 GMT Lines: 20