[NSRCA-discussion] Denial of Service attack on RCU

[Mike Hester]

BlankHi Ed (and everyone)

Since it was my thread that was in question, I spent the better part of this morning trying to get to the bottom of this. 

Answer: it's not an attack, it's a quirk with Norton. Sometimes Norton can't tell the difference between a "real" attack and an attempt to look for cookies for faster uploads, etc. It's one reason I don't use Norton anymore. It's a great program, but the firewall section leaves a lot to be desired. 

Also realize that if there is a ligitimate intrusion/attack, like an email virus, some are written to randomly "blame" something else to mask it's true information. 

Rest assured, there's nothing wrong with the pic itself, or anything in the thread. But thanks for the heads up!

-Mike
  ----- Original Message ----- 
  From: Ed Alt 
  To: NSRCA Mailing List 
  Sent: Wednesday, February 08, 2006 8:00 AM
  Subject: [NSRCA-discussion] Denial of Service attack on RCU


  Hi there, this is both a friendly warning as well as a request to get an email address to contact someone at RCU.  I just had Norton Firewall detect and block an intrusion attempt, apparently from RCU's server.  Details:

  IP address 67.15.230.18, node name image.rcuniverse.com, sent a MSSQL_NULL_Packet_DoS attack to my computer when I clicked on the following image in the Pattern forum, thread "RE: Black Magic v2 builder's thread! *Updated*":  http://image.rcuniverse.com/forum/thumbnails/166073/Ay74527.jpg

  Norton firewall lists IP address 67.15.230.18 as the most frequent attacker, with the latest attack on 2/8/2006 at 7:44:58 AM.

  Be careful, it looks like it eminates from there.  I hope they can find the problem soon, but they need to be notified.

  Thanks
  Ed


------------------------------------------------------------------------------


  _______________________________________________
  NSRCA-discussion mailing list
  NSRCA-discussion at lists.nsrca.org
  http://lists.nsrca.org/mailman/listinfo/nsrca-discussion
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.nsrca.org/pipermail/nsrca-discussion/attachments/20060208/c25c4f06/attachment-0001.html 
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: image/gif
Size: 145 bytes
Desc: not available
Url : http://lists.nsrca.org/pipermail/nsrca-discussion/attachments/20060208/c25c4f06/attachment-0001.gif