From owner-freebsd-security Sun Oct 10 0:32: 5 1999 Delivered-To: freebsd-security@freebsd.org Received: from hotmail.com (f297.hotmail.com [207.82.251.189]) by hub.freebsd.org (Postfix) with SMTP id 7BB88153FE for ; Sun, 10 Oct 1999 00:31:25 -0700 (PDT) (envelope-from madrapour@hotmail.com) Received: (qmail 93992 invoked by uid 0); 10 Oct 1999 07:31:25 -0000 Message-ID: <19991010073125.93991.qmail@hotmail.com> Received: from 195.96.144.44 by www.hotmail.com with HTTP; Sun, 10 Oct 1999 00:31:20 PDT X-Originating-IP: [195.96.144.44] From: "N. N.M" To: freebsd-security@FreeBSD.ORG Subject: Port 31789 scanning and ... Date: Sun, 10 Oct 1999 00:31:20 PDT Mime-Version: 1.0 Content-Type: text/plain; format=flowed Sender: owner-freebsd-security@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.org Hi everybody, 1) I have IPFW and by studying its daily logs I found out that somebody scans the port 31789 of all the servers and even clients in my network. What can be potentially found on this port? 2) There was another log entry in the log files which makes no sense for me. That is as the follow: Oct 9 23:21:43 firewall /kernel: ipfw: 147 Deny TCP Y.Y.Y.Y X.X.X.X in via ed1 Fragment = 147 This log entry was repeated, some of them had a different value of Fragment. Can anybody explain that? thanks in advance, Nazila ______________________________________________________ Get Your Private, Free Email at http://www.hotmail.com To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-security" in the body of the message