[chat] Re: [SLUG] [OT] Someone trying to hack me

[Ken Foskey <foskey@xxxxxxxxxxxxxxxx>]

Some of us are stuck with the economic reality of working on Windows. 
This means we have to have the real article hanging around somewhere. 
Why do you think there is cygwin?

I admit that the message was better placed in Chat than in the full 
list, slamming the guy many times is probably not going to win any 
windows converts browsing our archives.  One post, 'try your luck on 
chat and dont post directly windows questions here' would be better.

I feel like I am playing mother hen, I appologise for that but I want 
more people to come into the Linux fold.  That means showing an even keel.

Some porting actually requires people to have Windows and Linux, one 
would be their preferred platform however.

To answer the questions...


> I am convinced someone is trying to hack me, or crack rather. I am sitting
> on a dialup connection, and there's strange traffic happening. Even when I'm
> not FTP'ing or anything, I see I have sent out like half a megabyte or
> something.

> I am using Windows 98 SE on this particular connection.


As noted elsewhere there is a new virus going around, minda.  there is a 
fix in network associates site so check there.

I get regular hits on my cable modem at present from code red, I do not 
run an open web server.  Optus sent out a note saying expect this for 
ever and ever.  Basically there are moronic Windows users that would 
never patch their boxes.

> Is there a packet sniffer for Windows that I can sit on the connection to
> inspect all incoming and outgoing traffic, and get the IP address of the
> other side, etc?


Cant help, windows tools I know of are either expensive or awful.  As 
suggested,  a real firewall around Linux is cheap and reliable.  I have 
a P100 and have no problems at all on a cable modem.

> What is the best firewall that I can install for Windoze 98?


As mentioned elsewhere zonealarm.  I have heard nothing but good reports 
on it.   The vunerability is that it is so popular so it must be subject 
to specific attacks at some point.

Good luck,
KenF