Re: arp table overflow due to windows worm

2004-10-15 Thread Henrique de Moraes Holschuh
On Sat, 16 Oct 2004, Ben Goedeke wrote: > Should it really be possible for a single infected windows machine to dos > a linux firewall? Please tell me it's not true and there's just something > I'm overlooking. I'm at my wits end here and don't even know what to try > next. So any pointers are much

arp table overflow due to windows worm

2004-10-15 Thread Ben Goedeke
Hi list This might be a bit offtopic since there's nothing debian specific about the problem I'm having. If you feel this has no place on this list please point me to a more appropriate list for this question. Starting last week I noticed random network outages on the lan I'm administering. There

[no subject]

2004-10-15 Thread Anurag Sharma
Thanks, Anurag +44.7818.034367 - mobile +1.703.961.1991 - tel +1.866.213.3527 - voicemail/fax -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Re: chkrootkit - possible bad news`

2004-10-15 Thread Rolf Kutz
* Quoting Bas ([EMAIL PROTECTED]): > If you do not run Portsentry you have a problem.. I disagree. There could be another process listening at that. - Rolf -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Re: chkrootkit - possible bad news`

2004-10-15 Thread Bas
I presume you run Portsentry on the same machine if you do than the blindshell INFECTED is nothing to worry about ITs normal behavior if you run Portsentry and chkrootkit on the same machine. If you do not run Portsentry you have a problem.. Bas -- To UNSUBSCRIBE, email to [EMAIL PROT