[Author Prev][Author Next][Thread Prev][Thread Next][Author Index][Thread Index]

Re: IRCNet abuse

To: or-talk@xxxxxxxxxxxxx
Subject: Re: IRCNet abuse
From: Adam Langley <alangley@xxxxxxxxx>
Date: Wed, 8 Jun 2005 18:48:24 +0100
Delivered-to: archiver@seul.org
Delivered-to: or-talk-outgoing@seul.org
Delivered-to: or-talk@seul.org
Delivery-date: Wed, 08 Jun 2005 13:45:23 -0400
Domainkey-signature: a=rsa-sha1; q=dns; c=nofws; s=beta; d=gmail.com; h=received:message-id:date:from:reply-to:to:subject:in-reply-to:mime-version:content-type:content-transfer-encoding:content-disposition:references; b=E1WmQ7G9uYO4AwPBA4QXioag5VOzbKJdx5ocJyXAXk0NJwW960swMP0BXe05CVt9dZrr2jaemQ9Ubs5yc8EisFkb/XsC3/EuzBpIn36bTgiKzudsDeJiype33WHE6V2RVbkWiDL2gfG/dNXosynIMaF6OHK2aSTKj5tAuTr3nlw=
In-reply-to: <20050608174239.08B56CC7AA1@mail.poboxes.info>
References: <001701c56c48$b2a1a3f0$0a0aa8c0@none> <20050608174239.08B56CC7AA1@mail.poboxes.info>
Reply-to: or-talk@xxxxxxxxxxxxx
Sender: owner-or-talk@xxxxxxxxxxxxx

On 6/8/05, Evert Meulie <evert@xxxxxxxxxxxx> wrote:
> Just wondering: How do you know your server is used for IRC-abuse?  I
> currently still have 6667 open, but would very much like to know whether
> it's used or abused...?

You could port sniff outbound 6667 ports with tcpdump or ethereal.


AGL

-- 
Adam Langley                                      agl@xxxxxxxxxxxxxxxxxx
http://www.imperialviolet.org                       (+44) (0)7906 332512
PGP: 9113   256A   CC0F   71A6   4C84   5087   CDA5   52DF   2CB6   3D60

Follow-Ups:
- Re: IRCNet abuse
  - From: Chris Palmer
- Re: IRCNet abuse
  - From: Jonathan D. Proulx

References:
- IRCNet abuse
  - From: maillist
- RE: IRCNet abuse
  - From: Evert Meulie

Prev by Author: Re: Sorbs
Next by Author: Pure crypto geekery
Previous by thread: RE: IRCNet abuse
Next by thread: Re: IRCNet abuse
Index(es):
- Author
- Thread