Re: Port 1080

From: D.Spezialie (dspezialie@optusnet.com.au)
Date: 11/22/02

  • Next message: Andy Coates: "RE: Strange apache logs: CONNECT maila.microsoft.com:25" 
    Date: Fri, 22 Nov 2002 16:55:56 +1000
From: "D.Spezialie" <dspezialie@optusnet.com.au>
To: Chris Gross <chris@hugehosting.com>

    Dear Chris,

    Port 1080 is a Socks Proxy port, on that note if you server is a Redhat
    distro I would put my money on the Redhat Network Update Tool that is
    misconfigured/not-configured. I have expierienced this type of activity
    before from the Redhat 7.3 and 8.0 distros trying to contact RHN
    *constantly* through my firewall. On those distros the RHN daemon "out
    of the box" is started automatically.

    D.

    Chris Gross wrote:
    > We had a large spike in connections through our firewall and we tracked it
    > down to a Linux 8.0 server. It was creating about 200K connections with a
    > source and destination port of 1080. Has anyone else seen this.
    >
    >
    > ----------------------------------------------------------------------------
    > This list is provided by the SecurityFocus ARIS analyzer service.
    > For more information on this free incident handling, management
    > and tracking system please see: http://aris.securityfocus.com
    >

    ----------------------------------------------------------------------------
    This list is provided by the SecurityFocus ARIS analyzer service.
    For more information on this free incident handling, management
    and tracking system please see: http://aris.securityfocus.com

    Relevant Pages

    • Re: which linux? (not flame bait, thank you)
      ... > am wondering which distro to run, I used redhat back at the same time I ... Debian, ... the distros I've ever played with that aren't defunct (I'll start with ... some of the problems that linux people have with Slackware ...
      (freebsd-questions)
    • Re: [fw-wiz] MJR on Linux/OSS
      ... didn't see advantages worth the effort and went back to the Linux distros ... I believe that we are seeing this from RedHat to some ... The early systems didn't have any package management at all, ... it basicly uses tarballs with a few scripts to allow you to ...
      (Firewall-Wizards)
    • Re: wu-ftpd
      ... >> is support, if you are not interesting with support why dont you use ... Ok then let me give some information about myself, I'm a Linux developer, we are developing National Linux ... I don't use RedHat on my personal/company ... which is not included in RHEL distros then this is not the correct list. ...
      (RedHat)
    • Re: Abandoned Redhat customer needs advice
      ... >>updates through RHN update, the per incident pay support is there if you ... >>that does not have the budget for Redhat Enterprise and is only familiar ... >>Are there other distros as easy to setup and maintain as Redhat? ... Quantum materiae materietur marmota monax si marmota monax materiam possit ...
      (linux.redhat)
    • Re: remote printing to windows -- 2nd post
      ... > I have redhat 7.3 and trying to print to a hp printer directly through ... > tcp or through a windows print server. ... Port 9100 is used by HP's Jetdirect ... When in doubt, restart cups or lpd, depending upon which one your system ...
      (comp.os.linux)