Subject:
Re: [44net] net-44 source address spoofing?
From:
"Marius Petrescu" <marius(a)yo2loj.ro>
Date:
10/13/2013 08:20 PM
To:
"'AMPRNet working group'" <44net(a)hamradio.ucsd.edu>
Hi Rob,
I also get a some strange unrelated traffic: ping replies, SYN-ACK on
various ports, pings and SYN targeted to random IPs on my subnets.
So nothing new here.
I studied the source addresses for some time: china, russia, and alot of
"this IP range is really wold wide" according to RIPE.
Since they achieve nothing, I choose to ignore them, along with some tight
stateful firewall rules.
Marius, YO2LOJ
Yes, it is required to have a firewall in front of everything these days...
Of course I always firewalled malicious attempts to make incoming connects to my systems,
this unrelated traffic usually does no real harm. It was only the ping replies that
triggered
me to look what was really happening.
It is unfortunate that the amprgw has to carry all that unnecessary traffic...
(and the
amsat.org mailserver as well. the vast majority of what I receive is discarded
immediately as spam, mostly Korean. And I cannot even read Korean)
Rob