Re: A poor man's activity check :)

From: Tore Lund (tl001@online.no)
Date: 01/09/02 

From: Tore Lund <tl001@online.no>
Date: Wed, 09 Jan 2002 11:03:12 +0100

Art Kopp wrote:
>
> On Tue, 08 Jan 2002 21:42:09 +0100, Tore Lund <tl001@online.no> wrote:
>
> >Thanks again. Now, for the sake of completeness I disabled my Outpost
> >Free and asked Gibson to probe my ports. Here's the one disagreeable
> >result:
> >
> > 135 RPC OPEN!
>
> Interesting. I've never had that port open when testing at grc or
> anywhere else. I wonder which Microsoft services he's referring to. I
> wonder if it has anything to do with using Internet Explorer as the
> browser? And which version(s)?

Looks like a bug. There's a patch for NT, but I haven't yet found one
for Win2K (which I am using):

  http://support.microsoft.com/default.aspx?scid=kb;en-us;q305399 

-- 
    Tore

Relevant Pages

  • Re: Black Ice and Hackers :-)
    ... combination with some other firewall like Outpost. ... That's based on what you told BlackIce to do to protect the machine. ... ports 137 and 138 to all IP, but the ACCEPT setting is set by BlackICE ...
    (comp.security.firewalls)
  • Re: What is the Pattern here ?
    ... Wolfgang Kueter wrote: ... At first I thought they were Zombies probing Server Ports for other ... Zombied DNS or Web Servers with low TTL's but now they're hitting Ports ... way they act when I probe back makes me wonder if they are Zombies. ...
    (comp.security.firewalls)
  • Re: failed shields up test
    ... probing application like nmap on this laptop, and probe my firewall. ... This allows me to use ANY protocols, any ports, or IP addresses without ... worrying about what the ISP may think. ...
    (alt.os.linux.suse)
  • Re: TCP_Probe_HTTP
    ... attacker will probe many ports, ... Monitoring for access attempts against unused service ports points ...
    (comp.security.firewalls)
  • Re: firewall but which one
    ... Thanks for reply Bob.I actually installed outpost again today, ... If a Trojan horse is ... The test found visible ports on your system: ...
    (comp.security.firewalls)
Quantcast