All of lore.kernel.org
 help / color / mirror / Atom feed
From: "Jim Gifford" <maillist@jg555.com>
To: Antony Stone <Antony@Soft-Solutions.co.uk>,
	netfilter@lists.netfilter.org
Subject: Re: Block/Accept by MAC Address
Date: Tue, 1 Oct 2002 17:48:10 -0500	[thread overview]
Message-ID: <003401c2699c$9eb9b320$cd06ea43@W2RZ8L4S02> (raw)
In-Reply-To: 20021001083118.SDVF28874.mta06-svc.ntlworld.com@there

This guy is moving around from IP's and different addresses. The main thing
I noticed is that I have numerous connections with keep-alives on my Apache
and Proftp server. Here is an example of what I have been noticing.
67.234.6.201,1032     64.30.195.78,21       tcp     ESTABLISHED  119:59:59
67.234.6.201,1121     64.30.195.78,21      tcp     ESTABLISHED  119:55:55
67.234,6,201,1692    64.4.13.144,1863      tcp     ESTABLISHED  119:50:52
67,234,6,201,1695    64.4.13.144,1863      tcp     ESTABLISHED  119:49:12

I usually have about 10 or 15 of these from his IP range. I just figured
blocking his MAC would be a option, since they are unique.


----- Original Message -----
From: "Antony Stone" <Antony@Soft-Solutions.co.uk>
To: <netfilter@lists.netfilter.org>
Sent: Tuesday, October 01, 2002 3:31 AM
Subject: Re: Block/Accept by MAC Address


> On Tuesday 01 October 2002 2:33 am, Jim Gifford wrote:
>
> > I have a guy who keeps hacking my machine and his IP
> > address is always changing and so does his hostname.
>
> How is he hacking your machine ?   What is accessible on your system for
him
> to have a go at ?
>
> A firewall is not the answer to every problem.
>
> Antony.
>
> --
>
> There are only 10 types of people in the world:
> those who understand binary notation,
> and those who don't.
>
>



  reply	other threads:[~2002-10-01 22:48 UTC|newest]

Thread overview: 8+ messages / expand[flat|nested]  mbox.gz  Atom feed  top
2002-10-01  1:33 Block/Accept by MAC Address Jim Gifford
2002-10-01  2:24 ` Joel Newkirk
2002-10-01  6:15 ` Hanz F.
2002-10-01  6:34 ` Anders Fugmann
2002-10-01  8:07 ` Antony Stone
2002-10-01  8:31 ` Antony Stone
2002-10-01 22:48   ` Jim Gifford [this message]
2002-10-01 23:14     ` Antony Stone

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

  Avoid top-posting and favor interleaved quoting:
  https://en.wikipedia.org/wiki/Posting_style#Interleaved_style

* Reply using the --to, --cc, and --in-reply-to
  switches of git-send-email(1):

  git send-email \
    --in-reply-to='003401c2699c$9eb9b320$cd06ea43@W2RZ8L4S02' \
    --to=maillist@jg555.com \
    --cc=Antony@Soft-Solutions.co.uk \
    --cc=netfilter@lists.netfilter.org \
    /path/to/YOUR_REPLY

  https://kernel.org/pub/software/scm/git/docs/git-send-email.html

* If your mail client supports setting the In-Reply-To header
  via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line before the message body.
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.