Great Circle Associates Firewalls
(January 1997)
 

Indexed By Date: [Previous] [Next] Indexed By Thread: [Previous] [Next]

Subject: tftp and cisco auto probe?
From: Robert Hanson <roberth @ cet . com>
Date: Sat, 25 Jan 1997 15:13:08 -0800 (PST)
To: firewalls @ greatcircle . com

is this a new one or just strange?

i had to netboot a customers router to fix a hosed OS...

so, i setup a linux host to only allow tftpd from one ip address to
netboot and fix it... no probs...

i had setup the /etc/inetd.conf to allow tftpd only for these sessions and
set the hosts.allow to only allow the tftp from that one ip address and
sent a SIGHUP to inetd...

set it back when i was done...

the network that my main input is on has some other routers on it... in
this case a CISCO repeatedly tried to ftpd to this host many times during
and after this i was doing this work...

my syslog recorded all the unsuccessful attempts to get at that machine...

is this just strange or is there someone or some machine auto sniffing
packets on the input network and looking to dump/get infos aka the cisco
router?

please advise.

--->
Robert H. Hanson                 Cutting Edge Communications, Inc.
Otis Orchards, Wa.         Regional Commercial Internet Service Provider
(509) 927-9541             email: roberth @
 cet .
 com -  http://www.cet.com/




Indexed By Date Previous: smap, smtpd, qmail, sendmail, etc.
From: Richard Bignell <kbc22 @ dial . pipex . com>
Next: Re: Journalism and security.
From: C Matthew Curtin <cmcurtin @ research . megasoft . com>
Indexed By Thread Previous: Re: smap, smtpd, qmail, sendmail, etc.
From: M Lyons <lyonsm @ netbistro . com>
Next: Re: tftp and cisco auto probe?
From: Ryan Russell/SYBASE <Ryan . Russell @ sybase . com>

Google
 
Search Internet Search www.greatcircle.com