ISP Linux support

Jeff McCright jeff.mccright at southernunionco.com
Thu Aug 24 16:35:57 CDT 2000


Moral:
Always use a Firewall !!!!!
 ----------
From: kclug at kclug.org
To: kclug at kclug.org
Cc: jeff.mccright at southernunionco.com
Subject: RE: kclug - ISP Linux support

RR is bad. Bandwidth kills.
try watching the logs after this
"ipchains -A input -s 0/0 -d 0/0 137:139 -j DENY -l" or
"iptables -A INPUT -s 0/0 -d 0/0 -i eth0 -p 137:139 -j DENY -l"
 --idea is block and log all activity on 137:139

it becomes a passive scanner, I see at least 2-5 IPs a day come through,
some in other states. netbios loves to broadcast

telnet and ftp send passwd in plain text.
come on use ssh openssh.com and slow down the hackers

in short dont think rr, a shared network, is secure




More information about the Kclug mailing list