Re: advice-- a friend claims he's under attack
Shawn McMahon wrote:
> begin justin cunningham quotation:
> > Hi, sorry for the dramatic subject; a guy with a server in my colo
> > called me saying his site and mail is down and he had trouble reaching
> > the box. He's sshed in now and says netstat -n shows lots of
> > established connections. I told him to kill them and set ip chain rule
> > to deny all from that ip. What other advice can I give him immediately?
>
> Shut the box down and mail it to him. NOW. It's a danger to the
> security of all your customers.
Because someone has opened many connections to it in a possible DOS? Explain.
--
see shy jo
--
To UNSUBSCRIBE, email to debian-user-request@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmaster@lists.debian.org
Reply to: