Re: Port Scans and Prelude
From: Wojtek Walczak (gminick@hacker.pl)
Date: 02/25/03
- Next message: Stuart: "Changing the source address when accessing a different network"
- Previous message: Clifford Kite: "Re: Fragmentation / MTU Discovery"
- In reply to: Shawn Belcourt: "Port Scans and Prelude"
- Next in thread: Shawn Belcourt: "Re: Port Scans and Prelude"
- Reply: Shawn Belcourt: "Re: Port Scans and Prelude"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
From: Wojtek Walczak <gminick@hacker.pl> Date: Tue, 25 Feb 2003 14:57:56 +0000 (UTC)
Dnia Tue, 25 Feb 2003 14:29:05 GMT, Shawn Belcourt napisał(a):
> I recently installed the Linux MNF firewall.
...and you're crossposting to inform everybody.
> logs is udp scan attacks from my own ISP.
Scan is not an attack.
> When I asked the ISP to explain. They stated it was thier dhcp server
> trying to see if the server was still alive.
Strange. I thought dhcp uses ports 67 and 68 (of course there's a
possibility to change them).
> I have never heard of DHCP using port scans to see if a server is alive
> before.
What's your definition of scanning ?
-- [ ] gminick (at) underground.org.pl http://gminick.linuxsecurity.pl/ [ ] [ "Po prostu lubie poranna samotnosc, bo wtedy kawa smakuje najlepiej." ]
- Next message: Stuart: "Changing the source address when accessing a different network"
- Previous message: Clifford Kite: "Re: Fragmentation / MTU Discovery"
- In reply to: Shawn Belcourt: "Port Scans and Prelude"
- Next in thread: Shawn Belcourt: "Re: Port Scans and Prelude"
- Reply: Shawn Belcourt: "Re: Port Scans and Prelude"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Relevant Pages
|
