Re: VPN connection attempts to resolvers?

From: Valdis.Kletnieksat_private
Date: Thu Apr 04 2002 - 07:53:05 PST

Next message: Bill Royds: "RE: VPN connection attempts to resolvers?"

Previous message: Blake Frantz: "Botnet/Domains"
In reply to: Mike Lewinski: "VPN connection attempts to resolvers?"
Next in thread: Bill Royds: "RE: VPN connection attempts to resolvers?"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

On Wed, 03 Apr 2002 15:41:23 MST, Mike Lewinski <mikeat_private>  said:

> Since I am not a VPN expert, I'm wondering if anyone else can shed some
> light on what might be going on here. Is this just a brain-dead VPN client
> that's making bad assumptions about it's resolvers? Or is there something
> more malicious going on? The traffic was picked up after a SYN flood to one
> of the DNS servers led to further investigation.

Been there, done that.  Quite possibly a Windows box that has the little
box checked for "Try to negotiate IPSec connection always" (am not a
WIndows person, not sure exactly what it's labeled).

-- 
				Valdis Kletnieks
				Computer Systems Senior Engineer
				Virginia Tech

application/pgp-signature attachment: stored

Next message: Bill Royds: "RE: VPN connection attempts to resolvers?"
Previous message: Blake Frantz: "Botnet/Domains"
In reply to: Mike Lewinski: "VPN connection attempts to resolvers?"
Next in thread: Bill Royds: "RE: VPN connection attempts to resolvers?"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

This archive was generated by hypermail 2b30 : Thu Apr 04 2002 - 11:10:00 PST