Great Circle Associates Firewalls
(April 1995)
 

Indexed By Date: [Previous] [Next] Indexed By Thread: [Previous] [Next]

Subject: Any logs of SATAN attacks against firewalls? (fwd)
From: tom @ pserv1 . dot . state . az . us (Tom Brink)
Date: Thu, 13 Apr 95 21:28:08 MST
To: firewalls%greatcircle . com @ janus . dot . state . az . us (Firewalls)
Reply-to: tom @ pserv1 . dot . state . az . us

Sick Puppy writes:
> Date: Thu, 13 Apr 1995 12:31:00 -0400 (EDT)
> From: Sick Puppy <sikpuppy @
 maestro .
 com>
> Subject: Any logs of SATAN attacks against firewalls?
> 
> So far I haven't seen anything that resembles a SATAN attack against a 
> firewall, only a few things that could have been customised S.. or 
> equally well could have been an attack script, coming out of US sites 
> rather then European sites.
> 
> Has anyone seen an S.. attack against a firewall?
> 
> If so, could you post part of the logs please?
> 
>                                           Sick Puppy
>                                           Network Security Consultant
>                                           Eastern Dynamics Corp.

I had requested that SATAN be run against our WAN (actually firewall).  The
logs show every active port was probed.  The real give away was when it
accessed my anon ftp, it used the password SATAN.
-- 
Tom Brink tom @
 dot .
 state .
 az .
 us
Technical Support Specialist
Technical Research Center
Information Services Group
Arizona Department of Transportation

Indexed By Date Previous: Re: Out of Office Notification
From: Ken Hardy <ken @ bridge . com>
Next: Re: KarlBridge/Router vs Satan and an overview of the new version 3.0
From: Darren Reed <avalon @ coombs . anu . edu . au>
Indexed By Thread Previous: Re: Out of Office Notification
From: Ken Hardy <ken @ bridge . com>
Next: DEF CON ]I[, no speakers on firewalls
From: Sick Puppy <sikpuppy @ maestro . com>

Google
 
Search Internet Search www.greatcircle.com