On Sat, Oct 25, 1997 at 06:53:04PM -0400, Bill Hamel made some electrons appear in the following form: > Hello, > > Well maybe not spoofing *BUT*. > > I noticed some connectivity problems to one of our MAXes with SNMP. I > telnet'ed to the MAX and did a "show users". Which showed this > > I 245348133 2:20 7:11 26400 MP[0] 204.120.80.167 mcar > I 245348124 > 2:23 4:2 28800 MP[0] 204.120.80.161 geme > < a bunch more IP's and > then > > I 245348028 1:17 3:4 26400 MP[0] 205.164.157.2 mkm > > This is the IP address of one of our servers < 205.164.157.2 >, I suspect > this user is playing some sort of spoofing game which is not a good thing. > > Is there a way to deny the max from accepting a connection from certain IP > addresses within our Network ? > > Our boarder routers are configured not to allow traffic that originates > outside of our network with IP's of our network ( anti-spoofing ) but what > about this sort of attack where someone logs in with an IP of a server on > the network ? > > Any insight here greatly appreciated. > > Regards, > Bill Hamel > > > > > ++ Ascend Users Mailing List ++ > To unsubscribe: send unsubscribe to ascend-users-request@bungi.com > To get FAQ'd: <<A HREF="http://www.nealis.net/ascend/faq">http://www.nealis.net/ascend/faq</A>> -- ++ Ascend Users Mailing List ++ To unsubscribe: send unsubscribe to ascend-users-request@bungi.com To get FAQ'd: <<A HREF="http://www.nealis.net/ascend/faq">http://www.nealis.net/ascend/faq</A>> </PRE> <!--X-MsgBody-End--> <!--X-Follow-Ups--> <HR> <STRONG>Follow-Ups</STRONG>: <UL> <LI><STRONG><A HREF="msg10111.html">Re: (ASCEND) Our IP Spoofed a MAX ... !</A></STRONG></LI> <UL> <LI><EM>From</EM>: Phillip Vandry <vandry@Mlink.NET></LI> </UL> <LI><STRONG><A HREF="msg10088.html">Re: (ASCEND) Our IP Spoofed a MAX ... !</A></STRONG></LI> <UL> <LI><EM>From</EM>: Bill Hamel <bill@hamel.net></LI> </UL> </UL> <!--X-Follow-Ups-End--> <!--X-References--> <STRONG>References</STRONG>: <UL> <LI><STRONG><A HREF="msg10086.html">(ASCEND) Our IP Spoofed a MAX ... !</A></STRONG></LI> <UL> <LI><EM>From</EM>: Bill Hamel <bill@hamel.net></LI> </UL> </UL> <!--X-References-End--> <!--X-BotPNI--> <HR> <UL> <LI>Prev by Date: <STRONG><A HREF="msg10089.html">(ASCEND) Mail System Error - Returned Mail</A></STRONG> </LI> <LI>Next by Date: <STRONG><A HREF="msg10086.html">(ASCEND) Our IP Spoofed a MAX ... !</A></STRONG> </LI> <LI>Prev by thread: <STRONG><A HREF="msg10086.html">(ASCEND) Our IP Spoofed a MAX ... !</A></STRONG> </LI> <LI>Next by thread: <STRONG><A HREF="msg10088.html">Re: (ASCEND) Our IP Spoofed a MAX ... !</A></STRONG> </LI> <LI>Index(es): <UL> <LI><A HREF="maillist.html#10087"><STRONG>Main</STRONG></A></LI> <LI><A HREF="thrd216.html#10087"><STRONG>Thread</STRONG></A></LI> </UL> </LI> </UL> <!--X-BotPNI-End--> <!--X-User-Footer--> <!--X-User-Footer-End--> </BODY> </HTML>