* Illustre Orman [05-24-03 19:02]:

On Sat, 2003-05-24 at 19:57, Patrick Shanahan wrote:

...

* Illustre Orman [05-24-03 18:32]:

...

what is this guy trying to do how can i add his ip to iptables to block him?

66.140.25.157 - - [24/May/2003:17:03:39 -0400] "CONNECT 66.140.25.157:802 HTTP/1.0" 405 310 66.140.25.157 - - [24/May/2003:17:03:40 -0400] "POST http://66.140.25.157:802/ HTTP/1.0" 405 307

You probably do not want to block him. It is: host 66.140.25.157 157.152.25.140.66.in-addr.arpa. domain name pointer proxyscan.freenode.net

Do you have a chat session active?

yes

Just a guess, the chat session host is freenode.net or operprojects.net? -- Patrick Shanahan Please avoid TOFU and trim >quotes< http://wahoo.no-ip.org Registered Linux User #207535 icq#173753138 @ http://counter.li.org Linux, a continuous *learning* experience

On Saturday 24 May 2003 09:53 pm, John LeMay wrote:

...

...

You probably do not want to block him. It is:

...

host 66.140.25.157 157.152.25.140.66.in-addr.arpa. domain name pointer proxyscan.freenode.net

Do you have a chat session active?

yes

Freenode does some kind of port scan when you connect and every so often after as I understand. I get those all the time. Something to do with their blocking bots or unauth'ed servers I guess.

Some IRC servers i see won't let you in if you have an open relay on port 1080 (socks proxy) and maybe 8080 or 3128 (HTTP proxies). It's some sort of security measure on their part to cut back on anonymous ppl's. Or dumb ppls that would have open relays. ---------------------- Eric Bambach Eric@CISU.net ----------------------