Is it normal to have FWROUTE from port 119?
From: Jerome Mrozak (fake@address.com)Date: 01/29/02
- Next message: Wayne McGlinn: "Re: Easy Question?"
- Previous message: Craig Wiesner: "Reviewers for Online Course on Security Wanted"
- Next in thread: Frank S: "Re: Is it normal to have FWROUTE from port 119?"
- Reply: Frank S: "Re: Is it normal to have FWROUTE from port 119?"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
From: Jerome Mrozak <fake@address.com> Date: Tue, 29 Jan 2002 16:46:53 -0600
I installed a firewall for the first time, ZoneAlarm 2.6.261 (263?). I
proceeded to do a little browsing on my dial-up connection. The log
reported a lot of connections from their NNTP server (port 119) to a
variety of ports on my computer. A sample of this is:
FWROUTE,2002/01/26,22:35:47 -6:00
GMT,xxx.xxx.xxx.xxx:119,xxx.xxx.xxx.xxx:9670,TCP (flags:AP)
(Server and my DHCP address obfuscated)
Lots of ports accessed: 31990, 25555, 15363, 30381, 33892 and about 30
more. I'm not running any services on my Win NT 4.0 sp5 box that I'm
aware of.
My ISP says that these FWROUTE statements are normal traffic for
delivering NNTP. Being a rookie, I don't know.
Does anyone have the "truth" out there?
TIA,
Jerome.
- Next message: Wayne McGlinn: "Re: Easy Question?"
- Previous message: Craig Wiesner: "Reviewers for Online Course on Security Wanted"
- Next in thread: Frank S: "Re: Is it normal to have FWROUTE from port 119?"
- Reply: Frank S: "Re: Is it normal to have FWROUTE from port 119?"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Relevant Pages
|
