[H-GEN] (AUSCERT#38535) Re: The recient spate of port scans and intrusion attempts. (fwd)

[Andrae Muys]

---------- Forwarded message ----------
Date: Mon, 13 Jul 1998 11:09:53 +1000
From: auscert at auscert.org.au
To: andrae at humbug.org.au
Cc: auscert at auscert.org.au, auslug at linuxsa.org.au
Subject: (AUSCERT#38535) Re: The recient spate of port scans and intrusion attempts. 
Resent-Date: Mon, 13 Jul 1998 13:00:51 +0930
Resent-From: auslug at linuxsa.org.au

-----BEGIN PGP SIGNED MESSAGE-----



Hi Andrae/HUMBUG,

> Should we be doing anything?  
> Is there anyway the various LUG's can help AUSCERT, or any other
> Authorities? 

Thanks for your report and your vote of support.

It it likely that you refer to the recent activity using the 'mscan' tool.
Unfortunately, this easy-to-use tool brings 'doorknob-rattling' within the 
grasp of the novice Internet user.

> I have already advised Humbug members to check their log's more regularly,
> and to ensure they have applied any security patches/workarounds available
> for their system.  We will also be having a brief security
> discussion/forum at the meeting tommorrow to help our less experienced
> users understand the basics of securing a machine.

The above advice is exactly the kind of thing that AUSCERT advocates.

Every system connected to the Internet is going to, at one time or another,
have their 'doorknobs rattled', and, at present there is very little we can
do except be vigilant.  

We welcome any and all information you can give us regarding this kind of 
activity, now and in the future.

Thanks and Best Regards,
Mark
===========================================================================
 Mark McPherson                   |  Phone:     +61 7 3365 4417
 AusCERT                          |  (answered during business hours)
 The University of Queensland     |  (on call after hours for emergencies)
 Qld.  4072.                      |  Fax:       +61 7 3365 7031
 Australia                        |  Internet:  auscert at auscert.org.au
                                  |  Web:       http://www.auscert.org.au/
===========================================================================



-----BEGIN PGP SIGNATURE-----
Version: 2.6.3i
Charset: noconv
Comment: ftp://ftp.auscert.org.au/pub/auscert/AUSCERT_PGP.key

iQCVAwUBNanrACh9+71yA2DNAQFLkAQAlk4RehM81Hew57hDpfjYFgl+SVWdd7c+
DpEiteHR1Zz70/kB0yifOhXRDau9VfK8WipvnYrlsydgJ3AIIoMACVOwfv08p8Mw
CGWnKTT2vB3edCsCMctIpmvWaGPeYipSW+r4a32ZG1EyW87ERTVGtLGaWTyHpbk3
ezw55eXSS/s=
=+Kwl
-----END PGP SIGNATURE-----