RE: Odd Increase in Malformed Packets Aimed at Port 0

From: Geo. (georger_at_nls.net)
Date: 10/19/05

  • Next message: Bryan Allen: "Re: Dismantling Botnets?" 
    To: <incidents@securityfocus.com>
Date: Wed, 19 Oct 2005 12:08:36 -0400

    >>
    10/17/2005 12:29:56.528 - Alert - Network Access - Malformed or unhandled
    IP packet dropped - 13.106.57.65, 0, X1 - XXX.XXX.XXX, 1025 - IP Protocol
    17
    <<

    Sygate firewall holds port 1025 UDP open, are you running that on any of the
    machines at those locations?

    Geo.

  • Next message: Bryan Allen: "Re: Dismantling Botnets?"

    Relevant Pages

    • Re: TCP 3389 and Remote Desktop
      ... conflict using a Linksys wireless router for a peer to peer network ... provided instructions for changing the remote port using RegEdit, ... firewall you utilize on said computer *and* have Remote Desktop turned on ... One method of accessing several machines behind a single router is to change ...
      (microsoft.public.windowsxp.work_remotely)
    • Re: SBS 2003 and Outlook RPC over HTTP issues
      ... Look in IIS at your Exchweb, Exadmin, exchange-oma, and RPC sites' directory ... Why is it called RPC over HTTP if HTTP is not really needed to be ... As pointed out by others, port 80 does NOT need to be open, and yes, it ... I have about 20 of these SBS machines at other locations and have ...
      (microsoft.public.windows.server.sbs)
    • Re: Event ID 6161 for HP 6840
      ... patch related to an exposure via the print spooler service. ... download which offers the option of a local port. ... >> There were no problems with the install and the printer works find so long ... >> 3) All machines on the network can connect to the printer via Internet ...
      (microsoft.public.windowsxp.print_fax)
    • Re: Babysitting on iptables requested :-)
      ... for acceptance? ... > that is destined to port range 137-139, tcp as well as udp, incoming ... > between Windows machines, so without this a Windows machine in your ... MS packets from my LAN to the gateway ...
      (comp.os.linux.security)
    • Re: Firewalls and RPC (was "Re: Improvement to IPFilter / nfsd in FBSD (6.2+?)")
      ... most other RPC services get assigned high port numbers in the 327xx ... NFS is port 2049 by default, ... I don't trust the rest of the clients on my subnet other ... managed personal machines, virii, and spyware on machines here. ...
      (freebsd-questions)