Re: [cobalt-security] Need some help on a Attack Alert and a response from the source please...

[Jaana Jarve <netcat@xxxxxxxxx>]

On Tue, 10 Feb 2004, Chuck Lewis wrote:

> Hi Folks,
>
> I have NO idea what it means or no idea how to respond to this person. Any
> help would be GREATLY appreciated.

looks like your portsentry got it handled fine, and you are not really
running an insecure proxy anyway, are you? so do nothing. and if they
continue, technically you should complain to their upstream. which most
probably will not help, considering where they are located.

if you have a hard time making sense of your firewall logs,

http://www.robertgraham.com/pubs/firewall-seen.html is a pretty good
reference for starters and recommended reading.

rgds,
netcat