Re: port 21

From: Nickolay A. Kritsky (nkritsky@internethelp.ru)
Date: 05/31/01


From: "Nickolay A. Kritsky" <nkritsky@internethelp.ru>
To: <security@freebsd.org>
Date: Thu, 31 May 2001 13:28:01 +0400

My opinion is that unknown scanner was hoping to meet one of those admins who still use remote port of TCP/UDP packet as filter in
their firewall rules (like this: "ipfw allow tcp from any 21").

NKritsky - SysAdmin InternetHelp.Ru
http://www.internethelp.ru
e-mail: nkritsky@internethelp.ru

-----Original Message-----
From: Lim Seng Chor <Lim.Seng.Chor@sit.edu.my>
To: freebsd-security@FreeBSD.ORG <freebsd-security@FreeBSD.ORG>
Date: 31 мая 2001 г. 13:01
Subject: port 21

my kernel message showing:
Connection attempt to TCP 202.184.64.29:21 from
213.137.2.195:21

anyone can explain why 213.137.2.195 can use port 21 to connect
to my ftp port but not random port above 1024?

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-security" in the body of the message

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-security" in the body of the message



Relevant Pages

  • Re: excessive TCP dulplicate acks revisted
    ... The tcp duplicate ACK attack is back. ... there was a thread on duplicate TCP acks in -CURRENT. ... TCP STREAM TEST from localhost port 0 AF_INET to greenhouse- george.18clay.com port 0 AF_INET ... Socket Socket Message Elapsed ...
    (freebsd-current)
  • excessive TCP dulplicate acks revisted
    ... The tcp duplicate ACK attack is back. ... there was a thread on duplicate TCP acks in -CURRENT. ... TCP STREAM TEST from localhost port 0 AF_INET to greenhouse- george.18clay.com port 0 AF_INET ... Socket Socket Message Elapsed ...
    (freebsd-current)
  • Re: How to tell if a firewall alert is suspicious or not
    ... > WHY this SBCGlobal DNS server would be contacting Adobe Acrobat on port ... They have to parts, a kernel and the userland, in which programs, which are ... With Internet Protocol and TCP it is so, that any network interface in the ... To initiate a TCP connection, first the server has to "listen" on a port. ...
    (comp.security.firewalls)
  • RE: Configure Hardware Firewall for SBS 2003
    ... the corresponding ports to the SBS box. ... When a router is deployed at the SBS end, you must forward the port numbers ... TCP 110 This port is used for POP3 mail clients. ... TCP 1723 PPTP VPN connection ...
    (microsoft.public.windows.server.sbs)
  • Re: Can someone tell me what this is exactly?
    ... >But port 80 connections seem to get through. ... >on port 80 (tcp). ... >Host: www ... >Connnection: close ...
    (comp.os.ms-windows.nt.admin.security)