On Thu, 2009-07-30 at 08:59 +0200, Ralf Hildebrandt wrote:
> * Evan Platt <e...@espphotography.com>:
> > At 03:59 PM 7/29/2009, you wrote:
> > >It looks like somebody is trying to figure out my internal users as
> > >evidenced by log excerpts below.  Is there something I could do to, if
> > >not prevent this, reduce it?
> > 
> > If  you're seeing a lot of attempts, I say just block them in your 
> > firewall...
> > 
> > # whois 93.85.224.123
> > 
> > OrgName:    RIPE Network Coordination Centre
> > OrgID:      RIPE
> > Address:    P.O. Box 10096
> > City:       Amsterdam
> > StateProv:
> > PostalCode: 1001EB
> > Country:    NL
> > 
> > ReferralServer: whois://whois.ripe.net:43
> > 
> > NetRange:   93.0.0.0 - 93.255.255.255
> > CIDR:       93.0.0.0/8
> 
> Your whois is broken:
> inetnum:        93.85.224.0 - 93.85.231.255
> netname:        BELPAK
> descr:          Republican Unitary Enterprise BELTELECOM
> descr:          MINSK branch
> descr:          Republic of Belarus
> country:        BY
> admin-c:        DG1612-RIPE
> tech-c:         OB1713-RIPE
> status:         ASSIGNED PA
> mnt-by:         AS6697-MNT
> source:         RIPE # Filtered
> 
> person:       Dmitry Gorbukov
> address:      Belarus
> address:      220088, Minsk
> address:      ul. Zaharova, 57
> address:      UC MINSKOBLTELECOM
> phone:        +375 17 5001131
> fax-no:       +375 17 5001193
> e-mail:       d...@minsktelecom.by
> nic-hdl:      DG1612-RIPE
> mnt-by:       AS6697-MNT
> source:       RIPE # Filtered
> 
> person:         Oleg Bylina
> address:        Belarus
> address:        220088, Minsk
> address:        ul. Zaharova, 57
> address:        UC MINSKOBLTELECOM
> phone:          +375 17 5001383
> fax-no:         +375 17 5001193
> e-mail:         o...@minsktelecom.by
> nic-hdl:        OB1713-RIPE
> mnt-by:         AS6697-MNT
> source:         RIPE # Filtered
> 
Apart from the IPTables a more autonomous fix could be done with the
(improper ?) use of Anvil. Any more than X connections in a couple of
minutes and goodnight sweetheart. 

This combined with max errors perhaps?
-- 
-----------------------------------------------------------

C Werclick .Lot
Technical incompetent
Loyal Order Of The Teapot.

This e-mail and its attachments is intended only to be used as an e-mail
and an attachment. Any use of it for other purposes other than as an
e-mail and an attachment will not be covered by any warranty that may or
may not form part of this e-mail and attachment. 



Reply via email to