Koozali.org: home of the SME Server

Legacy Forums => General Discussion (Legacy) => Topic started by: Juan on October 16, 2003, 02:38:49 PM

Title: ¿Hacker atack?
Post by: Juan on October 16, 2003, 02:38:49 PM

Hello everybody,

Anybody knows what mean the text : IP_MASQ:reverse ICMP: failed checksum from xxx.xxx.xxx.xxx?

I have it in the "messages" file  thousands of this message, and it with diferents IP's from.
This is an atack of a hacker.

Last day I have a problem with the qmail, one e-mail sent automatically to a lot of people and the person who sent this hadn't select at all, only send to 3 persons, and the system sent it to a lot of people. We analys the systems and we are free of virus.
¿Anybody knows what happend?

Thanks.

Title: Re: ¿Hacker atack?
Post by: Jens Kruuse on October 16, 2003, 03:43:08 PM

http://www.e-smith.org/faq.php3#6q6

Title: Re: ¿Hacker atack?
Post by: Doug M. on October 17, 2003, 03:37:51 AM

http://archives.neohapsis.com/archives/sf/linux/2000-q4/0234.html

Title: Re: ¿Hacker atack?
Post by: Doug M. on October 17, 2003, 03:53:58 AM

Could be an attack or just a normal checksum failures.

http://cert.uni-stuttgart.de/archive/incidents/2001/11/msg00008.html

http://archives.neohapsis.com/archives/sf/linux/2000-q4/0234.html