[NSRCA-discussion] Denial of Service attack on RCU

[Ed Alt]

Cool, good to hear Mike.  Thanks for checking into it.

Ed


>From: "Mike Hester" <kerlock at comcast.net>
>Reply-To: NSRCA Mailing List <nsrca-discussion at lists.nsrca.org>
>To: "NSRCA Mailing List" <nsrca-discussion at lists.nsrca.org>
>Subject: Re: [NSRCA-discussion] Denial of Service attack on RCU
>Date: Wed, 8 Feb 2006 10:18:08 -0500
>
>BlankHi Ed (and everyone)
>
>Since it was my thread that was in question, I spent the better part of 
>this morning trying to get to the bottom of this.
>
>Answer: it's not an attack, it's a quirk with Norton. Sometimes Norton 
>can't tell the difference between a "real" attack and an attempt to look 
>for cookies for faster uploads, etc. It's one reason I don't use Norton 
>anymore. It's a great program, but the firewall section leaves a lot to be 
>desired.
>
>Also realize that if there is a ligitimate intrusion/attack, like an email 
>virus, some are written to randomly "blame" something else to mask it's 
>true information.
>
>Rest assured, there's nothing wrong with the pic itself, or anything in the 
>thread. But thanks for the heads up!
>
>-Mike
>   ----- Original Message -----
>   From: Ed Alt
>   To: NSRCA Mailing List
>   Sent: Wednesday, February 08, 2006 8:00 AM
>   Subject: [NSRCA-discussion] Denial of Service attack on RCU
>
>
>   Hi there, this is both a friendly warning as well as a request to get an 
>email address to contact someone at RCU.  I just had Norton Firewall detect 
>and block an intrusion attempt, apparently from RCU's server.  Details:
>
>   IP address 67.15.230.18, node name image.rcuniverse.com, sent a 
>MSSQL_NULL_Packet_DoS attack to my computer when I clicked on the following 
>image in the Pattern forum, thread "RE: Black Magic v2 builder's thread! 
>*Updated*":  
>http://image.rcuniverse.com/forum/thumbnails/166073/Ay74527.jpg
>
>   Norton firewall lists IP address 67.15.230.18 as the most frequent 
>attacker, with the latest attack on 2/8/2006 at 7:44:58 AM.
>
>   Be careful, it looks like it eminates from there.  I hope they can find 
>the problem soon, but they need to be notified.
>
>   Thanks
>   Ed
>
>
>------------------------------------------------------------------------------
>
>
>   _______________________________________________
>   NSRCA-discussion mailing list
>   NSRCA-discussion at lists.nsrca.org
>   http://lists.nsrca.org/mailman/listinfo/nsrca-discussion
><< BlankBkgrd.gif >>


>_______________________________________________
>NSRCA-discussion mailing list
>NSRCA-discussion at lists.nsrca.org
>http://lists.nsrca.org/mailman/listinfo/nsrca-discussion