Why don't you use ipfwadm?? I got almost the same problem... Type man ipfwadm
Regards, Anderson At 21:38 27/04/99 -0400, Benoit.Joly wrote: >im getting this kind of things about 2 or 3 times a week... >with some netbus and bo try. > >i sent lot of emails to their isp but still receive 2 or 3 attack per >week from other ips... > >what should i do?, is there a way to protect me against this? currently i >have fakebo. > >Benoit Joly > >On 27 Apr 1999, Arcady Genkin wrote: > >> Hi all: >> >> To continue my new Linux user paranoia, I have just noticed in >> xconsole that someone's been trying to connect to every port from port >> 2 thru 1024. It looks like this: >> >> Apr 27 20:03:09 main tcplogd: tcpmux connection attempt from [EMAIL PROTECTED] [206.47.37.4] >> Apr 27 20:03:09 main tcplogd: port 2 connection attempt from [EMAIL PROTECTED] [206.47.37.4] >> Apr 27 20:03:09 main tcplogd: port 3 connection attempt from [EMAIL PROTECTED] [206.47.37.4] >> Apr 27 20:03:09 main tcplogd: port 4 connection attempt from [EMAIL PROTECTED] [206.47.37.4] >> ... >> ... >> Apr 27 20:08:13 main tcplogd: port 1024 connection attempt from [EMAIL PROTECTED] [206.47.37.4] >> >> This one was the last. Bellglobal is my ISP provider, and I'm >> connected via ADSL modem. In between these messages sometimes there >> are the following (I guess that's when existing service was found): >> >> Apr 27 20:03:46 main in.telnetd[7141]: connect from cpu.adsl.bellglobal.com >> Apr 27 20:04:34 main in.ftpd[7145]: connect from cpu.adsl.bellglobal.com >> >> Is this within frames of acceptable. I feel like complaining, but >> don't want to look like an idiot. :) >> >> Any comments highly appreciated! >> -- >> Arcady Genkin >> "I opened up my wallet, and it's full of blood..." - GsYDE >> >> >> -- >> Unsubscribe? mail -s unsubscribe [EMAIL PROTECTED] < /dev/null >> >> > > >-- >Unsubscribe? mail -s unsubscribe [EMAIL PROTECTED] < /dev/null > > > >
