>From what I understand with TCP wrappers, how about putting an entry or
command in the /etc/hosts.deny file that would spawn off a script when
this IP range or "unknown" tries to connnect. THe script obvioulsy would
run a traceroute and log it.
-aaron zadonick
On Mon, 26 Jan 1998, Pulzar wrote:
> Has anyone an idea how to configure a router of a possible way to trace a
> spoofed atempt to telnet to my server. Server has installed a tcp-wrapper
> which to my luck the hackers couldn't fool it, all i got in the logs was
> connection from uknown. Does anyone know how i could backtrace such
> attemts or even block them so they won't even come through the router.
> Thx for any help,
> Aleksander
>
Follow-Ups:
References:
-
spoofed IPs
From: Pulzar <pulzar @
maribor .
zrcalo .
si>
|
|
