Port 1080

From: Chris Gross (chris@hugehosting.com)
Date: 11/20/02

  • Next message: D.C. van Moolenbroek: "Re: Compromised FBSD/Apache" 
    From: "Chris Gross" <chris@hugehosting.com>
To: "Incidents Mailing List" <incidents@securityfocus.com>
Date: Wed, 20 Nov 2002 15:56:50 -0700

    We had a large spike in connections through our firewall and we tracked it
    down to a Linux 8.0 server. It was creating about 200K connections with a
    source and destination port of 1080. Has anyone else seen this.

    ----------------------------------------------------------------------------
    This list is provided by the SecurityFocus ARIS analyzer service.
    For more information on this free incident handling, management
    and tracking system please see: http://aris.securityfocus.com

    Relevant Pages

    • Re: SQL clients dropping connections on WAN
      ... I can transfer files over the connections, ... Server, even see the SQL 2000 server. ... The only change made when we did the DSL switch ... The forth server is actually on it's own subnet in the DMZ of the firewall ...
      (microsoft.public.sqlserver.clients)
    • Vista Protocol and Program Networking Issues
      ... connections aren't even getting to the servers I'm trying to connect. ... "failed to connect to the port 22 on SERVER" ... firewall both turned off, and turned on. ... also have worked in and outside the network, ...
      (microsoft.public.windows.vista.networking_sharing)
    • Re: Connection Sharing on demand
      ... user has to authenticate for each time they want an Internet service, ... That can be done as a firewall application with lots ... you'd have the user connect to a server ... mentioned blocking inbound connections - that's trivial to do with the ...
      (comp.os.linux.networking)
    • Re: smtp and iptables
      ... Still - even with that rule in the OUTPUT chain permitting outgoing ... smtp connections I can't send e-mails. ... permit returning icmp packages I can even ping the target mail server. ... But the smtp connection times out and my guess is that my firewall ...
      (comp.os.linux.networking)
    • Re: Firewalls: whats the use?
      ... > local connections and it is not possible to connect to it from the ... > Since it is a web server I obviously need to allow traffic from anyone ... > to port 80. ... The basic thing that a firewall does is limit what you have to worry about. ...
      (comp.os.linux.security)