Re: Port Scans and Prelude
From: David D. Huff Jr. (David.Huff@computer-critters.com)
Date: 02/27/03
- Next message: Luke Vogel: "Re: grsecurity & modprobe problem"
- Previous message: khobar: "Portsentry/iptables/logging"
- In reply to: Ali-Reza Anghaie: "Re: Port Scans and Prelude"
- Next in thread: Robert Tinsley: "Re: Port Scans and Prelude"
- Reply: Robert Tinsley: "Re: Port Scans and Prelude"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
From: "David D. Huff Jr." <David.Huff@computer-critters.com> Date: Wed, 26 Feb 2003 22:57:09 -0500
Ali-Reza Anghaie wrote:
> Shawn Belcourt wrote:
>
>>I recently installed the Linux MNF firewall. Its been great in the way it
>>works. One of the things that I have come accross lately in the prelude
>>logs is udp scan attacks from my own ISP. udp ports ranging from 1101 to
>>11136
>
>
> Which system from your ISP? Are you sure it's not their DNS servers
> responding?
>
> Use Ethereal or another packet analyzer to examine the content.
>
> Cheers, -Ali
>
Hmm, why would their DNS be hitting different ports?
- Next message: Luke Vogel: "Re: grsecurity & modprobe problem"
- Previous message: khobar: "Portsentry/iptables/logging"
- In reply to: Ali-Reza Anghaie: "Re: Port Scans and Prelude"
- Next in thread: Robert Tinsley: "Re: Port Scans and Prelude"
- Reply: Robert Tinsley: "Re: Port Scans and Prelude"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Relevant Pages
|
|
