[ale] unusual amount of 'net attacks from .fr ?

Transam transam at verysecurelinux.com
Fri Feb 14 00:12:17 EST 2003


On Thu, Feb 13, 2003 at 07:17:55PM -0500, Christopher Bergeron wrote:
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1

> Hey guys, over the past months (6-8) I've noticed a surge in the number 
> of attempted "hack" attempts on my firewall originating from .fr 
> domains.  Particularly   wanadoo.fr.  With all of the recent war 
> discussions and the purported relationship between France and Iraqi oil; 
> I'm wondering if there's a relationship...  Has anyone else noticed 
> anything like this on their routers (I have multiple routers in 
> completely different locales that have produced the same result).

It sounds like you could use an Adaptive Firewall to lock out anyone
attacking.

I have seen a LOT of spam from wanadoo.fr.  I've been told it's a
free email service.  Thus, spammers can be annoying before they're
kicked off.  For one client that was fed up, I simply treat all email
from wanadoo.fr as spam.  (They're a US based organization so there's
no concern about legitimate email.)

> I'm also considering redirecting .fr and .de domains on my webserver 
> (>200 unique hits a day - many from overseas); but I'm wondering what 
> the political implications of this would be?  Should I post a page 
> stating my feelings on things?  Should I just redirect them to a more 
> neutral french webpage that "supports US involvement in IRAQ" ?  or 
> should I just do nothing?

If it's your web page say what you want (as long as you don't
slander/libel anyone) and enjoy it.


> Anyone have any political-web-conduct pointers for me?  And have you 
> guys seen an increase in .fr hack attempts?

Don't say anything you wouldn't want your boss, your prospective boss,
your bank, your buddies, the Guv'ment, or your mother to see.

> Thanks,
> - -CB

Bob




> -----BEGIN PGP SIGNATURE-----
> Version: GnuPG v1.2.1 (MingW32)
> Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

> iD8DBQE+TDWxTKCy0t3zQgURAv02AJ9L4oOIayWRXSa01v9aw6MwL5fVbwCfRjjT
> CENa92AgEKFu0MastokiGZM=
> =z1bG
> -----END PGP SIGNATURE-----
_______________________________________________
Ale mailing list
Ale at ale.org
http://www.ale.org/mailman/listinfo/ale






More information about the Ale mailing list