🚀 go-pugleaf

On Sat, 28 Apr 2001 12:42:40 +0100, Simon Waters
<Simon@wretched.demon.co.uk> wrote:

>Nick Drage wrote:
>> 
>> .kr != Korea
>
>Urm kr = People Republic of Korea, unless something changed. Anyway the
>addresses I see this from are a Korean school and a Korean ISP dial up.

Nabbing the first list of country codes I Google:
http://www.thrall.org/domains.htm

KP = Korea (North)
KR = Korea (South)

So KR is South Korea, not "Korea" AFAIK.  Then again, considering my
grasp of current affairs, they could have re-joined recently and I
wouldn't have noticed.

<snip>

>> >> Anyone know what aspect of this scan/attack causes the hang?
>> 
>> Yes, first time I've heard anyone complain about this - what do your
>> PPP logs say ( /var/log/debug ? )
>
>I don't run PPP debug. Absolutely nothing logged apart from the IPChain
>denies on 111.

Considering the problem is PPP related I'd certainly recommend
temporaily running it.  How depends on how you connect, and I've only
used my special PPP setup so I'm not the best person to advise.

>> Er... this connections were all inbound weren't they?  What logical
>> step did I miss?
>
>He was just implying that if the box was hacked and being used to attack
>others (There isn't much of value to anyone else on it - even the
>software is all freely available) then it might appear to hang the
>Internet connection. But there isn't even a hint of anything being
>compromised.

Curiouser and curiouser, more details appreciated.

-- 
"Analogies generally suck."
David Taylor