Berkeley CSUA MOTD:Entry 16773
Berkeley CSUA MOTD
 
WIKI | FAQ | Tech FAQ
http://csua.com/feed/
2025/05/25 [General] UID:1000 Activity:popular
5/25    

1999/10/26-27 [Computer/Networking] UID:16773 Activity:nil
10/26   I have a linux box with a cable modem setup as a gateway for my local
        LAN.  Recently I see a lot of messages like the following appeared in
        the /var/log/messages file.  What the heck is that?

          Sep 11 20:07:28 <mygateway> portmap[4502]: connect from <unknown host>
           to callit(390109): request from unauthorized host
        \_ you're getting scanned
        \_ I'm on cable.  I get scanned almost every day.  Sometimes multiple
           times per day from different people.  My favorite is the people who
           scan my bsd box for back orifice.  They hit my telnet port.  My ftp
           port.  They ping me.  Traceroute me.  Try icmp redirects.  I don't
           even know what half the >1024 ports are they're trying to exploit.
           Block it all and forget about it.
           \_  How can you tell that you were tracerouted?  Is all this
               info logged to /var/log/messages or is there something
               more i should be doing to monitor my system (I'm using DSL
               as a gateway for my LAN and have not been getting scanned
               as far as i can tell.)
                \_ I've got a kernel level packet filter setup and I log most
                   of the garbage to it's own file which gets rotated every so
                   often and by size.  I only log it for personal amusement.
                   openbsd.
2025/05/25 [General] UID:1000 Activity:popular
5/25    

You may also be interested in these entries...
2012/7/26-9/24 [Computer/Networking] UID:54445 Activity:nil
7/26    Why big mega cable companies rule:
        http://arstechnica.com/tech-policy/2012/07/how-big-cable-killed-the-open-set-top-box-and-what-to-do-about-it
	...
2012/4/26-6/4 [Computer/Networking] UID:54371 Activity:nil
4/26    I see that soda has an ipv6 address but ipv6 traffic from this box
        doesn't actually work (ping6 <DEAD>ipv6.google.com<DEAD>, ping6 http://www.v6.facebook.com
        Is this expected to work?
        \_ Soda doesn't have a real IPv6 address.  The IPv6 addresses you see
           in ifconfig are just link-local addresses; any IPv6-capable machine
           will autogenerate these, whether or not it's connected to an IPv6
	...
2010/11/1-2011/1/13 [Computer/Networking] UID:54002 Activity:nil
11/1    I'm moving from a home in Fremont to another home within the same ZIP
        code in Fremont, and AT&T customer service says I cannot transfer my
        DSL service because DSL is not available at my new home.  Is that BS?
        Are they just trying to push me to subscribe to their more expensive
        U-verse service?  I'm not asking for any lightening-speed connection.
            \_ could be
	...
2009/5/22-29 [Computer/HW/Laptop, Computer/HW/Display] UID:53032 Activity:low
5/22    Are LED monitors much better than LCD monitors?
        \_ OLED is still too new to know.  They're direct emitters, so don't
           have a backlight, and can turn completely off, hence better black.
           The early news was that blue pixels burn out relatively quickly.
           \_ FWIW, Zune HD will use OLED.
        \_ Dunno, but I saw a very nice LED TV for just $2K. Wouldn't that
	...
2009/5/2-6 [Computer/HW/Laptop, Computer/HW/Drives] UID:52933 Activity:kinda low
5/2     I have a 1Gbps switch. It is connected to a SANS RAID-1 with
        two WD Green 1T that takes 1Gbps connection, as well as a laptop
        that is also 1Gbps. Online benchmarks show *sustained* transfer
        rate of about 1/2 of 1Gbps with the WD Green... cool!!! But
        in practice, I'm only getting 68Mbps (read SANS->PC file transfer),
        far below what I expected. The switch says both devices are using
	...
2009/4/22-28 [Computer/SW/Security] UID:52894 Activity:nil
4/22    ok, here's a little networking puzzler. I haven't been able to access
        youtube for a couple weeks. Couldn't figure out why. Happened on all
        browsers. traceroute did weird stuff and then timed out. Finally I
        got so frustrated I setup firefox to ssh tunnel through soda.csua,
        which worked great. Then, I kill the ssh proc, quit FF, and now,
        I can access youtube just fine from any browser. wtf? any
	...