Re: What's going on here? Anonymous surfing using another companies ISP.

From: Peter Wilson (peter_wilson69_at_hotmail.com)
Date: 05/25/03 

Date: Sun, 25 May 2003 08:57:53 +1000

I suppose I just didn't consider the obvious. It was just the first time I
had seen this kind of behaviour.

Thanks.

- Peter

"Horst Knobloch" <horschti2@gmx.de> wrote in message
news:banj08$k8p$1@innferno.news.tiscali.de...
> On Saturday 24 May 2003 08:10 , Peter Wilson wrote:
>
> > It was late at night and no staff were in the office, yet the firewall
> > showed that 12 people within the company were surfing the net. Since
> > there was only a single modem into (and out of) the organization it
> > appeared that people were telling 'our' computer to surf back out to the
> > net, then re-route the results back to Europe.
> >
> > Europe Requests URL > Our Computer in Australia did the surfing > Our
> > computer passed back results to Europe.
> >
> > The firewall was incorrectly configured (WinNT4 using MS Proxy 2.0 -
> > Actually not configured at all) and I did not have time to diagnose
fully
> > what was going on - I just fixed it.
> >
> > How was this accomplished? Protocol used? Hacker Tool?
>
> It looks like your MS (Web) Proxy was open and people on the
> Internet (mis-)used it for anonymous "surfing". The Hacker Tool
> involved was just a web browser which has your M$ proxy
> configured as it's web proxy.
>
> Even if you have fixed the firewall, I would check whether you
> are able to have the M$ Proxy answering requests from the
> internal net *only*.
>
>
> HTH
>
> Ciao, Horst
> --
> »When pings go wrong (It hurts me too)« E.Clapton/E.James/P.Tscharn

Relevant Pages

  • Re: File Menu activates unknown internet data exchange
    ... but how would I check the Proxy ... >> computer and somewhere else during this delay. ... >What happens if you uncheck all proxy settings? ... The first time I go to use the File ...
    (microsoft.public.windows.inetexplorer.ie6.browser)
  • Re: How to speed up the webservice proxy creation
    ... Other than what Dan said, with .NET Framework 2.0, our lifes will be ... > What is happening is that the serializer for the types exposed/consumed by ... > the proxy is generated on first use. ... > For each proxy object for first time creation it takes looong time. ...
    (microsoft.public.dotnet.framework.webservices)
  • Re: Problem with instanciating proxy class
    ... My app is a .net2 winforms app written in c# using visual studio 2005. ... the autogenerated proxy class, the first time I instanciate my proxy ... small delay because of JIT compilations and serializers, ...
    (microsoft.public.dotnet.framework.webservices)
  • Re: Whats this attack?
    ... The attacker is looking for a proxy. ... To replicate the ... First time I ...
    (comp.os.linux.security)
  • Re: [fw-wiz] dirty packet tricks?
    ... solve via promiscuously sucking up packets. ... restriction that your 'sideways' proxy box is it will have to be on a hub ... The firewall will have to suppress all ICMP errors to the internal network ...
    (Firewall-Wizards)