Re: (ASCEND) Protecting IPs from Nukes on 4048 & 6248

[Michael Ghens <mghens@rain.org>]

Well as far as I can remember, a nuke is a classic buffer overflow attach
on windows machines port 139 (Netbios-ssn) . Read up on packet filtering
and block that port. There is not any real reasons why your users need to
communicate over the net using windows networking.

**********************************************************************
 Michael Ghens                   | RAIN Network System Administration| 
 Network System Manager          -------------------------------------
 phone: 805.899.8611             ICQ# 29145688
 email: mghens@rain.org          http://www.rain.org/~mghens
 Key fingerprint = 06DE 7902 2D7A 781C 248D  ADBA 800F D073 4E8C 1DC4
 Finger mghens@rain.org for gpg/pgp public key

On Wed, 9 Jun 1999, Rob Smarzik wrote:

> Date: Wed, 9 Jun 1999 22:54:01 -0400
> From: Rob Smarzik <robs@rjsonline.net>
> To: ascend-users@bungi.com
> Subject: (ASCEND) Protecting IPs from Nukes on 4048 & 6248
> 
> We have been having someone nuke our dialup ports on our Max 4048 and 6248
> boxes. I can not say if it is a true Nuke, we will have users all call in
> from a certain time frame and say they were locked up. They would restart
> there machine and dial back in and connect fine but can not surf the web.
> Once we delete and recreate the dial up networking dial up account on the
> customers machine using the same name for the icon it works perfect. We do
> not think it is just the dial up adapter software because they are all the
> exact problem from a 30 min. time frame.
> Has anyone else had this problem and if so what did you do to prevent in
> the future. Is there also anyway to monitor and log any nukes or attacks on
> the dial up ports on our end. We had a new tech come over from a competitor
> and they were not happy about it and said they would make us pay and could
> reek havock on our system for stealing their employee. Any suggestions
> would be thankfull.
> All in the days life of an ISP.
> 
> 
> ++ Ascend Users Mailing List ++
> To unsubscribe:	send unsubscribe to ascend-users-request@bungi.com
> To get FAQ'd:	<http://www.nealis.net/ascend/faq>
> 

++ Ascend Users Mailing List ++
To unsubscribe:	send unsubscribe to ascend-users-request@bungi.com
To get FAQ'd:	<http://www.nealis.net/ascend/faq>