Network Problem Solved but.....

[Scott Elcomb]

On 11/16/05, Imran . <imranqau-PkbjNfxxIARBDgjK7y7TUQ at public.gmane.org> wrote:
> Okay. Problem is solved. I looked at router's routing table and i am
> wondering why it was like this?
[...]
> Now, look at the router's routing table below. 192.168.2.0 network
> is directly connected. However, for 192.168.2.100 it got a gateway
> address through ICMP redirect 84.63.0.1. So in order to reach this
> sytem it was trying the gateway 84.53.0.1. Now i am wondering how
> this ICMP redirect happened? does it have to do something with
> security?
[...]
> So i just reset router settings and now it doesn't have 84.63.0.1 as
> gateway for 192.168.2.100. So now both linux and windows are working
> fine. however, i should have saved router's log but i forgot. i have
> firewalled disabled on router. should i turn it on?

It pretty much needs to be your decision;  Each component in your
network has an effect on the overall security of your machines (and
data).  The way I look at it is that the router is pretty much the
front door, I'd rather keep it locked.  Lotsa bad guys out there.  :(

After I finally started getting a handle on linux and got a my first
good and solid machine built I got hacked through an open ftp port
(highspeed timer exploit).  The only thing that saved the now
installed rootkit from sending reams and _reams_ of information about
my machine to a hotmail address was that I hadn't configured sendmail
yet.  Lol.  (That was the day I fell in love with sendmail.)

Anyway, I found out about it (root got the email) and decided it was
time for me to learn something about security.

In the meantime, and mad as h***, I sent a relatively polite email to
the hotmail address - curious how it was done.  Took me a while to
find out because the next day my linux wouldn't boot.  At all.

Now I try to lock things down.  I lost months and months of work to
that incident.

--
Scott Elcomb
Fight might with Right.  Your Right.
<http://psema4.gotdns.com.nyud.net:8090/copyright/>

2375+ Canadians oppose Bill C-60
http://KillBillC60.ca    Sign--> http://digital-copyright.ca/petition/
--
The Toronto Linux Users Group.      Meetings: http://tlug.ss.org
TLUG requests: Linux topics, No HTML, wrap text below 80 columns
How to UNSUBSCRIBE: http://tlug.ss.org/subscribe.shtml