SCOUG-HELP Mailing List Archives

<< Previous Message << >> Next Message >>

Date:	Wed, 9 Oct 2002 08:02:24 PST7
From:	"Steven Levine" <steve53@earthlink.net >
Reply-To:	scoug-help@scoug.com
To:	scoug-help@scoug.com
Subject:	SCOUG-Help: Re: Chat access

=====================================================
If you are responding to someone asking for help who
may not be a member of this list, be sure to use the
REPLY TO ALL feature of your email program.
=====================================================

In <3DA3DC88.608B1A59@pacbell.net>, on 10/08/02
at 10:37 PM, "J. R. Fox" said:

>I hope you're right. According to the SW log, some jerk(s) have been
>regularly banging on my firewall with attempted Netbus and Sub-7 attacks
>-- a bunch of 'em in just the last 36 hours. They keep bouncing off, off
>course, but it's annoying and a bit disconcerting. I don't want to leave
>a welcome banner and a window wide open for them. Consider

If you were not getting hits logged, I would make the assumption that your
firewall was broken. The attempts are like dust. There are everywhere.

>What precautions do you take, security-wise ?

You can't do much more than what you already are. Make sure your firewall
is working. Keep you virus signatures up to date. Don't run WinXX any
more than absolutely needed. Understand the nature of the attacks, so
that you don't spend time worrying about non-issues. The latter is
probably the most important.

Nothing you've yet said about your setup indicates you are running
anything that is vulnerable to attack. For example, you appear to be
concerned that running and IRC client is going to make you vulnerable to
attack. That's simply not the case. If you were infected with sub-7, the
worm would try to contact other worms via IRC and your firewall would
alert you that you have unexpected activity and, perhaps block the
attempts. Whether or not you run an IRC client is irrelevant to what
sub-7 can do.

Steven

--
---------------------------------------------------------------------
"Steven Levine" MR2/ICE 2.35 #10183 Warp4/FP15/14.085_W4
www.scoug.com irc.webbnet.org #scoug (Wed 7pm PST)
---------------------------------------------------------------------

=====================================================

To unsubscribe from this list, send an email message
to "steward@scoug.com". In the body of the message,
put the command "unsubscribe scoug-help".

For problems, contact the list owner at
"rollin@scoug.com".

=====================================================

Return to [ 09 | October | 2002 ]

SCOUG, Warp Expo West, and Warpfest are trademarks of the Southern California OS/2 User Group. OS/2, Workplace Shell, and IBM are registered trademarks of International Business Machines Corporation. All other trademarks remain the property of their respective owners.