From owner-FreeBSD-users-jp@jp.freebsd.org  Wed Apr  4 17:46:57 2001
Received: (from daemon@localhost)
	by castle.jp.freebsd.org (8.9.3+3.2W/8.7.3) id RAA06660;
	Wed, 4 Apr 2001 17:46:57 +0900 (JST)
	(envelope-from owner-FreeBSD-users-jp@jp.FreeBSD.org)
Received: from pis.toba-cmt.ac.jp (pis.toba-cmt.ac.jp [202.26.248.77])
	by castle.jp.freebsd.org (8.9.3+3.2W/8.7.3) with ESMTP id RAA06655
	for <FreeBSD-users-jp@jp.freebsd.org>; Wed, 4 Apr 2001 17:46:57 +0900 (JST)
	(envelope-from kiri@pis.toba-cmt.ac.jp)
From: kiri@pis.toba-cmt.ac.jp
Received: from kiri.pis (localhost [127.0.0.1])
	by pis.toba-cmt.ac.jp (8.11.1/8.11.1) with ESMTP id f348jxc02364
	for <FreeBSD-users-jp@jp.freebsd.org>; Wed, 4 Apr 2001 17:46:00 +0900 (JST)
	(envelope-from kiri@pis.toba-cmt.ac.jp)
Message-Id: <200104040846.f348jxc02364@pis.toba-cmt.ac.jp>
Date: Wed, 04 Apr 2001 17:45:59 +0900
To: FreeBSD-users-jp@jp.freebsd.org
In-Reply-To: <20010403011201C.amano@math.tsukuba.ac.jp>
References: <200104011321.f31DL9c87734@pis.toba-cmt.ac.jp>
	<20010403011201C.amano@math.tsukuba.ac.jp>
User-Agent: Wanderlust/2.4.0 (Rio) SEMI/1.13.7 (Awazu) FLIM/1.13.2 (Kasanui) MULE XEmacs/21.1 (patch 14) (Cuyahoga Valley) (i386--freebsd)
MIME-Version: 1.0 (generated by SEMI 1.13.7 - "Awazu")
Content-Type: text/plain; charset=ISO-2022-JP
Reply-To: FreeBSD-users-jp@jp.freebsd.org
Precedence: list
X-Distribute: distribute version 2.1 (Alpha) patchlevel 24e+010328
X-Sequence: FreeBSD-users-jp 60565
Subject: [FreeBSD-users-jp 60565] Re: Crack from Windows2000?
Errors-To: owner-FreeBSD-users-jp@jp.freebsd.org
Sender: owner-FreeBSD-users-jp@jp.freebsd.org
X-Originator: kiri@pis.toba-cmt.ac.jp

$B6M;3$G$9!#(B

$B!t(B $B$9$$$^$;$s!#$3$N%U%)%m%&$r8+F($7$F$^$7$?!#(B

At Tue, 03 Apr 2001 01:12:01 +0900,
Katsutoshi Amano wrote:
> 
> $B30$7$F$$$k$+$bCN$l$J$$$N$G$9$,!"(Bsf $B$N(B named $B$N%m%0$G(B
> 
> ..... named[..]: denied update from ($B%/%i%$%"%s%H(B) for (sf)
> 
> $B$N$h$&$J5-=R$,BgNL$K=q$+$l$F$$$^$;$s$+(B? ("denied" $B$N$H$3$m$O(B
> "unapproved" $B$+$b$7$l$^$;$s$,(B)
> 
> Windows2000 $B$O(B ($B;d$O?($C$?$3$H$,$J$$$N$G$9$,(B)$B%G%U%)%k%H$G$O(B
> DNS$B%5!<%P!<$K<+%[%9%H$rEPO?$9$kMW5a$r=P$9$h$&$K$J$C$F$$$k$=$&$G$9(B.
> $B%5!<%P!<$NJ}$,(BDynamic DNS $B$G$J$1$l$P!"$=$N$h$&$JMW5a$,<u$1IU$1$i$l(B
> $B$:>e$N$h$&$J%m%0$,BgNL$K5-=R$5$l$k$3$H$K$J$j$^$9(B. 
> $B$=$NMW5a$,B?$9$.$F(BDNS$B%5!<%P!<$,%Q%s%/$7$F$7$^$C$?!"$H$$$&$h$&$J(B
> $B$3$H$O$J$$$G$7$g$&$+(B. 

$B$_$?$$$G$9$M!#$=$l$G7k6I(B Windows2000 $B$H$N6&B8$OD|$a$F(B FreeBSD $B$H(B
Windows2000 $B$r40A4$KJ,N%$7$^$7$?!#$7$+$7!"(BFreeBSD $B$NJ}$O4pK\E*$K(B NIS
(DNS?)$B$,%$%+%l$?$_$?$$$G$9!#(Bdomainname $B$O@_Dj$5$l$^$9$,(B NIS $B$NG[I[%U%!(B
$B%$%k$,A4$FL58z$K$J$C$F$7$^$$$^$9!#(B

$B$?$@!"40A4$K$OL58z$K$J$C$F$$$J$$$N$+(B telnet $B$GNY$N%/%i%$%"%s%H$K(B login
$B$9$k$HHs>o$KD9$$;~4V$r$+$1$F%"%+%&%s%H$rC5$7$F$$$k$h$&$G$9(B($B"-(B)

$B!t(B $B2?$H%m%0%$%s$9$k$^$G$K(B 5 $BJ,(B 1 $BIC(B ^^;

kiri@sf:~[1005]% telnet c00
Trying 192.168.1.192...
Connected to c00.cct2.
Escape character is '^]'.  $B"+(B(1)

FreeBSD/i386 (c00) (ttyp0)

login:   $B"+(B(2)


sf# tcpdump host c00.cct2 and sf.cct2
tcpdump: listening on fxp0
17:23:29.430250 arp who-has c00.cct2 tell sf.cct2
17:23:29.430372 arp reply c00.cct2 is-at 0:0:e2:35:ca:98
17:23:29.430389 sf.cct2.1028 > c00.cct2.telnet: S 3665393607:3665393607(0) win 16384 <mss 1460> (DF) [tos 0x10] 
17:23:29.430562 c00.cct2.telnet > sf.cct2.1028: S 3488111964:3488111964(0) ack 3665393608 win 17520 <mss 1460> (DF)
17:23:29.430602 sf.cct2.1028 > c00.cct2.telnet: . ack 1 win 17520 (DF) [tos 0x10] 
17:23:29.431783 sf.cct2.1028 > c00.cct2.telnet: P 1:31(30) ack 1 win 17520 (DF) [tos 0x10] 
17:23:29.523823 c00.cct2.telnet > sf.cct2.1028: . ack 31 win 17490 (DF)   $B"+(B(1)
17:26:49.987111 c00.cct2.instl_boots > sf.cct2.domain:  33169+ PTR? 1.1.168.192.in-addr.arpa. (42)
17:26:49.987328 sf.cct2.domain > c00.cct2.instl_boots:  33169* 1/1/1 PTR  (93)
17:28:30.197933 c00.cct2.1070 > sf.cct2.domain:  33170+ A? sf.cct2. (25)   $B"+(B(2)
17:28:30.198156 sf.cct2.domain > c00.cct2.1070:  33170* 1/1/1 A sf.cct2 (71)
17:30:10.399274 c00.cct2.1073 > sf.cct2.domain:  33171+ A? sf.cct2. (25)
17:30:10.399506 sf.cct2.domain > c00.cct2.1073:  33171* 1/1/1 A sf.cct2 (71)
17:30:10.432724 c00.cct2.telnet > sf.cct2.1028: P 1:4(3) ack 31 win 17490 (DF) [tos 0x10] 
17:30:10.432884 sf.cct2.1028 > c00.cct2.telnet: P 31:34(3) ack 4 win 17520 (DF) [tos 0x10] 
17:30:10.433027 c00.cct2.telnet > sf.cct2.1028: P 4:42(38) ack 34 win 17517 (DF) [tos 0x10] 
17:30:10.433223 sf.cct2.1028 > c00.cct2.telnet: P 34:110(76) ack 42 win 17520 (DF) [tos 0x10] 
17:30:10.433335 c00.cct2.telnet > sf.cct2.1028: P 42:48(6) ack 110 win 17444 (DF) [tos 0x10] 
17:30:10.433382 sf.cct2.1028 > c00.cct2.telnet: P 110:116(6) ack 48 win 17520 (DF) [tos 0x10] 
17:30:10.433505 c00.cct2.telnet > sf.cct2.1028: P 48:66(18) ack 116 win 17520 (DF) [tos 0x10] 
17:30:10.435339 sf.cct2.1028 > c00.cct2.telnet: P 116:154(38) ack 66 win 17520 (DF) [tos 0x10] 
17:30:10.512022 c00.cct2.telnet > sf.cct2.1028: P 66:69(3) ack 154 win 17520 (DF) [tos 0x10] 
17:30:10.512095 sf.cct2.1028 > c00.cct2.telnet: P 154:157(3) ack 69 win 17520 (DF) [tos 0x10] 
17:30:10.512899 c00.cct2.telnet > sf.cct2.1028: P 69:87(18) ack 157 win 17520 (DF) [tos 0x10] 
17:30:10.513058 sf.cct2.1028 > c00.cct2.telnet: P 157:163(6) ack 87 win 17520 (DF) [tos 0x10] 
17:30:10.513211 c00.cct2.telnet > sf.cct2.1028: P 87:143(56) ack 163 win 17514 (DF) [tos 0x10] 
17:30:10.610770 sf.cct2.1028 > c00.cct2.telnet: . ack 143 win 17520 (DF) [tos 0x10] 
17:30:10.610930 c00.cct2.telnet > sf.cct2.1028: P 143:188(45) ack 163 win 17520 (DF) [tos 0x10] 
17:30:10.710771 sf.cct2.1028 > c00.cct2.telnet: . ack 188 win 17520 (DF) [tos 0x10] 
