Re: How to get response from cracking network

Maddog Abel (mad.dog@alumni.ust.hk)
Mon, 26 Oct 1998 16:40:14 +0800

That depends. If you're only a user then you really can't do much;
probably the best you can do is to check your configs and system to ban
all traffics from that domain (such as using firewall etc)

However if you are the owner (or admin) of the isp, then in addition to
threatening banning all traffic from that ISP, you can also notify other
ISPs there's such dangerous attackers from that Singapore ISP. You don't
want to do this quietly; you have to TELL that Singapore ISP you're
doing so. Usually threats are more effective than requests.

I know it's effective because (shameful) my ISP is being banned this
way, so ......

Maddog

[snip]

> For a couple of weeks now I have been suffering repeated cracker attempts from
> one or more users of an ISP in Singapore.
>
> On each occasion, I have sent log excerpts to postmaster@singa.pore.net and
> various other admin addresses at singa.pore.net with a
> request that they investigate and ask the user(s) involved to stop.
>
> So far, I have not had any acknowledgment from the site and the attacks
> continue.

[snip]
-
To unsubscribe from this list: send the line "unsubscribe linux-net" in
the body of a message to majordomo@vger.rutgers.edu