[CentOS] Anything todo against massive connects

Mon Jul 11 13:59:50 UTC 2005
Marco Garza <testuser at ccskavenger.info>

Niels Przybilla wrote:
> Hi,
>
> Yes i had a compromised server where a ircd was running on these
> ports.
>
> Now many clients try to connect, but the server has been replaced and
> no irc
> is running and a better firewall configuration.
>
> Best regards
>
> Niels
>
> -----Ursprüngliche Nachricht-----
> Von: centos-bounces at centos.org [mailto:centos-bounces at centos.org] Im
> Auftrag
> von Marco Garza
> Gesendet: Montag, 11. Juli 2005 15:47
> An: CentOS mailing list
> Betreff: Re: [CentOS] Anything todo against massive connects
>
> Niels Przybilla wrote:
>>> Hi,
>>>
>>> i got a server that is massivly contacted on the ports 5190, 5150
>>> and 6667.
>>>
>>> Is there any possibility to stop these requests ?
>>>
>>> I block everything with my firewall.
>>>
>>> That are ten thousands of different IP's that try to connect.
>>>
>>> Thanks and best regards
>>>
>>> Niels
>>>
>>
>>
>>

>
> 5190 is for AOL / AIM
> 6667 is IRC dcc
> I am not sure what 5150 is for.
>
> Do you have servers behind this server??
>
> -Marco Garza

Is the firewall in the same box?  Are these blocked connections affecting 
anything?

-Marco Garza