[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
[cobalt-users] DCC - was: Possible attack?
- Subject: [cobalt-users] DCC - was: Possible attack?
- From: "William J.A. Brillinger" <billy@xxxxxxxxxx>
- Date: Wed Nov 13 04:02:00 2002
- List-id: Mailing list for users to share thoughts on Sun Cobalt products. <cobalt-users.list.cobalt.com>
Good morning all,
Our Co-lo firewall admin informed me today that I am getting a lot of
deny's as listed below. Is this an attempted attack? What to do?
216.68.107.
162:6277 64.42.222.18:3557 L=136 S=0x00 I=13516 F=0x0000 T=49 (#1)
Nov 12 23:30:04 polaris kernel: Packet log: inet-in DENY eth0 PROTO=17
207.8.219.2
18:6277 64.42.222.18:3557 L=136 S=0x00 I=62307 F=0x0000 T=46 (#1)
>>> snip <<<
I looked up the ip's and some were things like dcc.etherboy.com - on
investigation of http://www.rhyolite.com/anti-spam/dcc/ I find they are
indeed all listed here as active dcc servers so I guess I know what it is now.
Question... should I ask my co-lo to open port 3557 for me? As I am indeed
using DCC as part of the SolarSpeed Anti Spam Package.
- Bill
---------------------------------
William J.A. Brillinger
Precision Design Co.
E-Mail: mailto:billy@xxxxxxxxxx
Web site: http://www.pdcweb.net