[H-GEN] security

[Rob Kearey]

Robert Stuart wrote:

> I'm relatively new to being directly permanently connected to the 'net
> and I was after some advice.  I'm up to date with security patches (all
> patches I think) and I've got appropriate filtering/proxying etc.  I'm
> logging numerous port scans checking out the usual finger, telnet, imap
> etc.  So far so good.  What should I do about them and at what level
> should I do something (ie is one or two OK)?  Who are the points of
> contact aside from AUSCERT?

Have you tried nsllookupping the perpertrator? I have a suspicion - if
I'm correct, it's an overzealous sysadmin, and harmless. Best person to
speak to would be hostmaster at uq.edu.au.

> Robert Stuart


-- 
Robert Kearey			Network Services	
The Prentice Centre		University of Queensland
(07) 3365 8527			Post No Gravy
Not speaking for my employer    Erase brain after reading