Re: TCP port 5000 syn increasing

From: Andreas (andreas_at_conectiva.com.br)
Date: 05/18/04

  • Next message: Nick FitzGerald: "RE: TCP port 5000 syn increasing" 
    Date: Tue, 18 May 2004 18:56:14 -0300
To: incidents@securityfocus.com

    On Tue, May 18, 2004 at 05:30:43PM -0400, Valdis.Kletnieks@vt.edu wrote:
    > I'm waiting for the first worm that tunnels over HTTP port 80, as a number
    > of protocols already do, to get around firewalls that only pass 25 and 80. ;)

    It would have to be "de-tunneled" on the inside to do something useful. Either
    the network is already compromised, or it exploits something on that specific
    service.

    ---------------------------------------------------------------------------
    Free 30-day trial: firewall with virus/spam protection, URL filtering, VPN,
    wireless security

    Protect your network against hackers, viruses, spam and other risks with Astaro
    Security Linux, the comprehensive security solution that combines six
    applications in one software solution for ease of use and lower total cost of
    ownership.

    Download your free trial at
    http://www.securityfocus.com/sponsor/Astaro_incidents_040517
    ----------------------------------------------------------------------------

  • Next message: Nick FitzGerald: "RE: TCP port 5000 syn increasing"

    Relevant Pages

    • Re: Any Intrusion Detection Appliances handle wired and wireless networks?
      ... > Network Security Specialist ... firewall with virus/spam protection, URL filtering, VPN, ... the comprehensive security solution that combines six ...
      (Focus-IDS)
    • RE: blocking p2p traffic
      ... Network Security Specialist ... the comprehensive security solution that combines six ... firewall with virus/spam protection, URL filtering, VPN, ...
      (Focus-IDS)
    • RE: Entercept HIDS Question
      ... This is one of those it depends on your network and application ... Subject: Entercept HIDS Question ... Security Linux, the comprehensive security solution that combines six ...
      (Focus-IDS)
    • Re: DHCP or Probe?
      ... somewhat limited understanding of cable network architecture, ... >> Security Linux, the comprehensive security solution that combines six ... > Protect your network against hackers, viruses, spam and other risks with Astaro ...
      (Incidents)
    • Re: IIS Search Method Overflow being revisted?
      ... firewall with virus/spam protection, URL filtering, VPN, ... Protect your network against hackers, viruses, spam and other risks with Astaro ... Security Linux, the comprehensive security solution that combines six ...
      (Incidents)