Great Circle Associates Firewalls
(April 1996)
 

Indexed By Date: [Previous] [Next] Indexed By Thread: [Previous] [Next]

Subject: Re: Aborting net connections
From: mike . fissel @ amp . com (Mike Fissel)
Date: Tue, 30 Apr 1996 07:19:43 -0400
To: firewalls @ greatcircle . com

Bryan Wrote:

> Is there a method for closing a connection in progress?
> 
> For example, suppose that's I'm a malicious hacker and that I've telneted
> to a machine to which i have no business accessing.  Now suppose that the 
> SysAdmin or SysSecAdmin discovers my connection.
> 
> Is there a method or procedure that they can use to immediately cut my "feed"
> from their system to mine?
> 
> I'm looking for a program that would be used to accomplish this.
> 
> for the purpose of this scenario, also assume the following:
> 
>   - hosts_access has been circumvented
>   - any security hardware has also failed to prevent unauth. access
>   - the invader is actively connected to system and munging the system.
>   - disconnecting the Internet connection is not available :(
> 
> N.B. This is only a imaginary scenario.
> 
> Thanks to all,
> 
> -brian
> lonewolf @
 wolf .
 microserve .
 com
> 

I think that this can be accomplished, if a UNIX box, by killing the telnet process that started with the illegal connection.

-Mike
mike .
 fissel @
 amp .
 com

Indexed By Date Previous: Re: Firewall Checking Tools..... (fwd)
From: Urivan Alyasid Saaib <llanero @ fciencias . ens . uabc . mx>
Next: Re: Dual Homed Host and Proxy services
From: Duan Zhenhai <ccdzh @ shoukui . pku . edu . cn>
Indexed By Thread Previous: Re: Aborting net connections
From: "<root>" <root @ wolf . microserve . com>
Next: Re: Aborting net connections
From: Kevin Graham <Kevin_Graham @ S7352c . 7000 . albertsons . com>

Google
 
Search Internet Search www.greatcircle.com