Re: Am I being hacked?

From: xmp (xmp_at_example.com)
Date: 08/27/04 

Date: Fri, 27 Aug 2004 13:32:52 GMT

Copelandia Cyanescens wrote:

> Also, ICMP packets aren't generally attached to a given port number. If
> your firewall is truly reporting ICMP packets going out from port 'X'
> then something is probably wrong with the firewall (one of the odd
> things I was talking about).

Stealth breaks RFC as far as I know, but doesn't it also tarpit port
scanners?

Another issue with online scans is that my ISP responds on TCP 389 and
1720. So online scans show those ports as closed instead of stealthed.
  This is rarely explained on sites like GRC. One more reason to use a
sniffer or firewalker to map out exactly what's happening.

michael

Relevant Pages

  • Re: keeping ports open
    ... If a port is open, it means that 1) a software or service is running on your ... and 2) you're not using a firewall or your firewall isn't ... Use firewall software and hardware and antivirus software that is ... Follow the instructions for hardening Windows and IIS at ...
    (microsoft.public.security)
  • Re: How to Maintain an IIS Server?
    ... > server running on a Windows 2000 server. ... before a firewall and antivirus have been installed]. ... open ports; however, this will not identify which program is using the port. ...
    (microsoft.public.inetserver.iis.security)
  • Re: CEICW fails at firewall config
    ... ISA Server prevents connection to a remote desktop when you connect through ... Remote Web Workplace on a Windows Small Business Server 2003-based computer ... Acceleration Server as a firewall. ... connection uses TCP port 4125. ...
    (microsoft.public.windows.server.sbs)
  • Re: How to Maintain an IIS Server?
    ... >> server running on a Windows 2000 server. ... > before a firewall and antivirus have been installed]. ... > program or executable using that port. ...
    (microsoft.public.inetserver.iis.security)
  • Re: Is secedit.exe left by a hacker?
    ... > tested on port 445. ... > I have a Linksys router that I use as a firewall to my ... Secedit.exe is the name of a legitimate Windows file, ... investigate the files on your computer - antivirus with the latest updates ...
    (microsoft.public.win2000.security)
Quantcast