Great Circle Associates Firewalls
(June 1996)
 

Indexed By Date: [Previous] [Next] Indexed By Thread: [Previous] [Next]

Subject: Re: unknown in tcpwrappers?
From: Chris Watson <scanner @ webspan . net>
Date: Wed, 5 Jun 1996 18:02:01 -0400 (EDT)
To: Steve Bergeon <sbergeon @ neosoft . com>
Cc: firewalls @ GreatCircle . COM
In-reply-to: <9606050828 . ZM6392 @ sbergeon . neosoft . com>

On Wed, 5 Jun 1996, Steve Bergeon wrote:

> Wrappers were unable to verify the systems name and ip address match.
> This could just be someone attempting access from an isp that does not
> have dns names assigned to all of its' address space.  Or...
> 
> If you want unresolvable systems to have access to a service, you can
> use the keyword UNKNOWN in your hosts.allow file.
No i DONT want them to get in but what is getting em riled is the fact
that this line:
Jun  4 23:23:32 orion telnetd[10526]: refused connect from unknown

will repeat over and over and over and over for like 5 pages of logs.
Im getting extremely annoyed at this at first i thought it was a random
goof but then i sit down and look at 9 or more pages of logs with nothing
in them but the same line above for 9 pages something is going on no one
is dumb enough to keep trying and trying and trying to telnet in with no
luck. I get the same line everynight repeatedly.

I dont know if is hould be worried about this or not. I mean their NOT
getting in but they are constantly trying its driving me nuts.

Anyway to find out the soruce IP? I want to figure out how to get rid of
this person or automated something.

--

===================================| Webspan Inc., ISP Division.
  FreeBSD 2.1.0 is available now!  | Phone: 908-367-8030 ext. 126 
-----------------------------------| 500 West Kennedy Blvd., Lakewood, NJ-08701
   Turning PCs into Workstations   | E-Mail: scanner @
 webspan .
 net
      http://www.freebsd.org       | SysAdmin / Network Engineer / Security
===================================| Member BSDNET team! http://www.bsdnet.org	




Follow-Ups:
References:
Indexed By Date Previous: RE: Memra
From: "Post, Lenny" <LennyPost @ aec . ca>
Next: Re: IANA private network numbers ..
From: Peter Jeremy <jeremyp @ gsms01 . alcatel . com . au>
Indexed By Thread Previous: Re: unknown in tcpwrappers?
From: Nelson Murilo <nelson @ pangeia . com . br>
Next: Re: unknown in tcpwrappers?
From: N D Ghaznavi <ndg @ Ghaznavi . com>

Google
 
Search Internet Search www.greatcircle.com