Urgent help needed!!!

From: Dimitris Vayenas <dimitrisv_at_iee.org.uk>
Date: Thu, 13 Mar 1997 23:29:31 +0200

Please help

My System disk-space dissapears at a rate of 15 MB per day and the
Performance of our Alpha Internet 1000 Server running 3.2d went downhill
and if the hard disk runs they it runs now it will definately stop running
for good soon....

I checked the disk space to find that the /usr/var/nsr/logs/messages file
was at 250MB!

I tried to see what was going wrong.... this is what I found ( !!!! :-( )
:


Mar 13 01:06:42 www routed[204]: packet from unknown router, 194.30.193.229
Mar 13 01:06:44 www routed[204]: packet from unknown router, 194.30.193.234
Mar 13 01:06:47 www routed[204]: packet from unknown router, 194.30.208.238
Mar 13 01:06:50 www routed[204]: packet from unknown router, 194.30.208.229
Mar 13 01:06:51 www routed[204]: packet from unknown router, 194.30.208.230
Mar 13 01:06:51 www routed[204]: packet from unknown router, 194.30.208.233
Mar 13 01:06:52 www routed[204]: packet from unknown router, 194.30.208.228
Mar 13 01:06:52 www routed[204]: packet from unknown router, 194.30.193.229
Mar 13 01:06:52 www routed[204]: packet from unknown router, 194.30.208.254
Mar 13 01:06:52 www routed[204]: packet from unknown router, 194.30.208.227
Mar 13 01:06:52 www routed[204]: packet from unknown router, 194.30.208.231
Mar 13 01:06:52 www routed[204]: packet from unknown router, 194.30.208.233
Mar 13 01:06:52 www routed[204]: packet from unknown router, 194.30.208.238
Mar 13 01:06:52 www routed[204]: packet from unknown router, 194.30.208.235
Mar 13 01:06:52 www routed[204]: packet from unknown router, 194.30.208.232
Mar 13 01:06:52 www routed[204]: packet from unknown router, 194.30.208.236
Mar 13 01:06:52 www routed[204]: packet from unknown router, 194.30.208.229
Mar 13 01:06:52 www routed[204]: packet from unknown router, 194.30.208.230
Mar 13 01:06:52 www routed[204]: packet from unknown router, 194.30.208.237
Mar 13 01:06:52 www routed[204]: packet from unknown router, 194.30.208.225
Mar 13 01:06:52 www routed[204]: packet from unknown router, 194.30.208.226
Mar 13 01:06:52 www routed[204]: packet from unknown router, 194.30.208.234

It does receive packets from a local router at this rate!!!! What a
professional way to hack one may think...!!!

Please advise me about the possible misconfiguration concerns of the new
router... what went wrong and gives me all this mess?

 Also... imagine that I get from my Internet Presence Provider the last
128 address of a C Class i.e. from xxx.xxx.xxx.128 to xxx.xxx.xxx.255 what
can be wrong so that my provider tells me that he cannot utilise the the
rest of the Class. i.e. I have taken the lot... What shall I check?

Thanking you....


Dimitris Vayenas
Athens, Greece
 
Received on Thu Mar 13 1997 - 22:42:33 NZDT

This archive was generated by hypermail 2.4.0 : Wed Nov 08 2023 - 11:53:36 NZDT