Skip site navigation (1)Skip section navigation (2)
Date:      Sun, 10 Oct 1999 14:37:51 -0600
From:      Nate Williams <nate@mt.sri.com>
To:        "N. N.M" <madrapour@hotmail.com>
Cc:        freebsd-security@FreeBSD.ORG
Subject:   Re: Port 31789 scanning and ...
Message-ID:  <199910102037.OAA11369@mt.sri.com>
In-Reply-To: <19991010073125.93991.qmail@hotmail.com>
References:  <19991010073125.93991.qmail@hotmail.com>

next in thread | previous in thread | raw e-mail | index | archive | help
> 1) I have IPFW and by studying its daily logs I found out that somebody 
> scans the port 31789 of all the servers and even clients in my network. What 
> can be potentially found on this port?

If it's a UDP packet, it's probably someone running traceroute.

> 2) There was another log entry in the log files which makes no sense for me. 
> That is as the follow:
> 
> Oct  9 23:21:43 firewall /kernel: ipfw: 147 Deny TCP Y.Y.Y.Y  X.X.X.X in via 
> ed1 Fragment = 147

This happens with buggy stacks, and is common.  I see it often from my
Win95 boxes....



Nate


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-security" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?199910102037.OAA11369>