On 02-07-14, Android8675 said the following...
Re: Re: Eratta Sec
By: Gryphon to Poindexter Fortran on Thu Feb 06 2014 07:10 pm
Yeah, that's what it says on the website. But has anybody else seen evidence that they've tried to snoop on your systems? Does anybody any infobeyond what they tell us on their website? Are they legit?
Does it matter? Your BBS is on the Internet, actually, everyone that's
on the Internet is on the Internet, if someone wants to play bad guy wether they are "legit" or not is irrelevant.
When I think about it, people that connect to my board are connecting to
a backed up VM, and even if they somehow hacked into my other files, there's really nothing of consiquence on my system that I'll miss. I
guess if you're really worried about EVERY IP that comes knocking on
your board, you might want to do what LK did and block all IPs and
figure out a way for people to request access and submit their IP ahead
of time.
This group in particular sounds like a security firm that researches internet security vulnerabilites so they can better serve their
customers security needs. Question is, who's their customers (if they
have any)?
I've started blocking whole countries via iptables. I've only blocked a few
so far, and left most open. But this firm is from within the US, so it's not something that I can block easily, unless I want to start adding individual IP's into the list. I may do that if there are obsessive knocks on the door from individual IP's in the US, with nobody logging in.
So basically, if I think that they are warranted, then I will block them.
But if they are legit, ie some probes like the telnet bbs guide or bbsnexus uses to verify that a bbs is up, then I would want to allow it.
That, basically is why I was asking.
--- Mystic BBS v1.10 A38 (Linux)
* Origin: Cyberia BBS | Cyberia.Darktech.Org | Kingwood, TX