Date: Sun, 16 May 1999 13:13:06 +0300 (EEST) From: Narvi <narvi@haldjas.folklore.ee> To: Harold Gutch <logix@foobar.franken.de> Cc: Peter Wemm <peter@netplex.com.au>, Kris Kennaway <kkennawa@physics.adelaide.edu.au>, Matthew Dillon <dillon@apollo.backplane.com>, danny <danny@pentalpha.com.hk>, freebsd-security@FreeBSD.ORG Subject: Re: network scan? Message-ID: <Pine.BSF.3.96.990516131042.2241W-100000@haldjas.folklore.ee> In-Reply-To: <19990516042657.A28280@foobar.franken.de>
next in thread | previous in thread | raw e-mail | index | archive | help
On Sun, 16 May 1999, Harold Gutch wrote: > On Sun, May 16, 1999 at 04:41:56AM +0800, Peter Wemm wrote: > > Kris Kennaway wrote: > > > On Wed, 12 May 1999, Matthew Dillon wrote: > > > > > > > :May 12 18:42:24 server /kernel: ipfw: 26000 Deny TCP 202.38.248.205:4359 > > > > :a.b.c.1:1080 in via ed0 > > > > :... > > > > > > > > I get this all the time from people scanning for netbios. I > > > > usually just ignore them. If I'm in a bad mood I send a nasty gram > > > > to the originating network. > > > > > > In this case they're looking for an open SOCKS proxy (so they can use it to > > > > In this particular case, it's a site in China. They have a heavily > > censored internet gateway, and I see lots of probes from china (and other > > areas in Asia that have enforced proxy use and heavily censored feeds) > > looking for *:1080 (socks), *:3128 (squid) and *:8080 (squid and/or other > > proxies including netscape). They are scanning for relays to bounce > > connections off to bypass the censored feed. > > > Just to make sure I'm getting this right - you're saying China > has a censored internet gateway (i.e. blocking *something* [what > exactly ?] ), but they do allow connections to ports 1080, 3128 > and 8080 ? > Where's the hard part? They censor "web traffic" (you know, that big bad evil thing). That teher may be other "not so straightforward" ways to get the same thing, is something else entirely. > bye, > Harold > > -- > <Shabby> Sleep is an abstinence syndrome wich occurs due to lack of caffein. > Wed Mar 4 04:53:33 CET 1998 #unix, ircnet > Sander There is no love, no good, no happiness and no future - all these are just illusions. To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-security" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?Pine.BSF.3.96.990516131042.2241W-100000>