<table cellspacing="0" cellpadding="0" border="0" ><tr><td valign="top" style="font: inherit;">it changes you internal nat address, your external un<span style="text-decoration: underline;">-natted address should stay.<br><br><br></span><br>--- On <b>Mon, 2/11/09, gordon dunlop <i>&lt;astrozubenel@googlemail.com&gt;</i></b> wrote:<br><blockquote style="border-left: 2px solid rgb(16, 16, 255); margin-left: 5px; padding-left: 5px;"><br>From: gordon dunlop &lt;astrozubenel@googlemail.com&gt;<br>Subject: Re: [dundee] Script Kiddie attack: in which our intrepid heroes nearly die of laughter<br>To: davidson.kris@gmail.com, "Tayside Linux User Group" &lt;dundee@lists.lug.org.uk&gt;<br>Date: Monday, 2 November, 2009, 21:20<br><br><div id="yiv2129102409"><br><br><div class="gmail_quote">2009/11/2 Kris Davidson <span dir="ltr">&lt;<a rel="nofollow" ymailto="mailto:davidson.kris@gmail.com" target="_blank"
 href="/mc/compose?to=davidson.kris@gmail.com">davidson.kris@gmail.com</a>&gt;</span><br><blockquote class="gmail_quote" style="border-left: 1px solid rgb(204, 204, 204); margin: 0pt 0pt 0pt 0.8ex; padding-left: 1ex;">
In addition to what Arron said and other factors (attack timeline,<br>
other info from browser profiling) it just doesn't feel like a<br>
bot/zombie.<br>
<br>
A UBR is really a Cisco name for a CMTS (Cable Modem Termination<br>
Server), ITs basically a Cisco router. The ways to change your IP are<br>
to ask for a UBR bounce, to unplug the modem for a week or to change<br>
the MAC address connected and do a hard reset.<br></blockquote><div><br>If you are using a router as the gateway, changing to another router automatically changes the IP address.<br><br>Gordon <br></div><blockquote class="gmail_quote" style="border-left: 1px solid rgb(204, 204, 204); margin: 0pt 0pt 0pt 0.8ex; padding-left: 1ex;">

<br>
<a rel="nofollow" target="_blank" href="http://www.cisco.com/en/US/products/hw/modules/ps4969/prod_models_home.html">http://www.cisco.com/en/US/products/hw/modules/ps4969/prod_models_home.html</a><br>
<div><div></div><div class="h5"><br>
Kris<br>
<br>
_______________________________________________<br>
dundee GNU/Linux Users Group mailing list<br>
<a rel="nofollow" ymailto="mailto:dundee@lists.lug.org.uk" target="_blank" href="/mc/compose?to=dundee@lists.lug.org.uk">dundee@lists.lug.org.uk</a> &nbsp;<a rel="nofollow" target="_blank" href="http://dundeelug.org.uk">http://dundeelug.org.uk</a><br>
<a rel="nofollow" target="_blank" href="https://mailman.lug.org.uk/mailman/listinfo/dundee">https://mailman.lug.org.uk/mailman/listinfo/dundee</a><br>
Chat on IRC, #tlug on <a rel="nofollow" target="_blank" href="http://irc.lug.org.uk">irc.lug.org.uk</a><br>
</div></div></blockquote></div><br>
</div><br>-----Inline Attachment Follows-----<br><br><div class="plainMail">_______________________________________________<br>dundee GNU/Linux Users Group mailing list<br><a ymailto="mailto:dundee@lists.lug.org.uk" href="/mc/compose?to=dundee@lists.lug.org.uk">dundee@lists.lug.org.uk</a>&nbsp; <a href="http://dundeelug.org.uk" target="_blank">http://dundeelug.org.uk</a><br><a href="https://mailman.lug.org.uk/mailman/listinfo/dundee" target="_blank">https://mailman.lug.org.uk/mailman/listinfo/dundee</a><br>Chat on IRC, #tlug on irc.lug.org.uk</div></blockquote></td></tr></table><br>