Security Incidents: Re: @home: Is *anyone* really home there???

[jburdge () AVENTAIL COM (Jon Burdge)]

> From: Greg A. Woods [mailto:woods () MOST WEIRD COM]
> Sent: Tuesday, February 29, 2000 10:10 PM
> To: INCIDENTS () SECURITYFOCUS COM
> Subject: Re: @home: Is *anyone* really home there???
<SNIP>
> I don't want to see any reports that simply mention an errant
> packet or
> two, regardless of what the packet destination port was.
<SNIP>

"An errant packet or two" is all most people see of a sunrpc scan.  I've
never had my sunrpc port connected to by a machine that was *not* hacked.
Therefore I consider a single connection important and go out of my way to
notify the administrators of that machine.

If that's truly what you mean by 'an errant packet or two' I think you're
missing something important.

Jonathan Burdge
These opinions do not reflect those of my employer.