ISP Linux support
    C T Miller 
    cmiller3 at kc.rr.com
       
    Wed Aug 23 01:49:24 CDT 2000
    
    
  
RR is bad. Bandwidth kills.
try watching the logs after this
"ipchains -A input -s 0/0 -d 0/0 137:139 -j DENY -l" or
"iptables -A INPUT -s 0/0 -d 0/0 -i eth0 -p 137:139 -j DENY -l"
--idea is block and log all activity on 137:139
it becomes a passive scanner, I see at least 2-5 IPs a day come through,
some in other states. netbios loves to broadcast
telnet and ftp send passwd in plain text.
come on use ssh openssh.com and slow down the hackers
in short dont think rr, a shared network, is secure
    
    
More information about the Kclug
mailing list