From owner-freebsd-security Sun Jun 13 12:30:31 1999 Delivered-To: freebsd-security@freebsd.org Received: from tok.qiv.com (tok.qiv.com [205.238.142.68]) by hub.freebsd.org (Postfix) with ESMTP id 4B6A314C02 for ; Sun, 13 Jun 1999 12:30:14 -0700 (PDT) (envelope-from jdn@acp.qiv.com) Received: (from uucp@localhost) by tok.qiv.com (MailHost/Current) with UUCP id OAA62001; Sun, 13 Jun 1999 14:30:08 -0500 (CDT) Received: from localhost (jdn@localhost) by acp.qiv.com (8.9.3/8.9.2) with ESMTP id OAA00872; Sun, 13 Jun 1999 14:24:50 -0500 (CDT) (envelope-from jdn@acp.qiv.com) Date: Sun, 13 Jun 1999 14:24:50 -0500 (CDT) From: Jay Nelson To: "Ed P." Cc: security@FreeBSD.ORG Subject: Re: Fwd: [linux-security] Re: Port 7 scan In-Reply-To: <99061312495500.02641@MOLTEN.R0CK.COM> Message-ID: MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII Sender: owner-freebsd-security@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.org This explains what is going on. Thank you. It does, though, raise a couple of other questions: The echo service is, AFIK, a peculiarly Unix service. Why do you suppose they chose echo for the latency test as opposed to a simple ping? Nearly everything with an ethernet card will respond to a ping returning, I would think, more useful latency information than a refused connect. Since echo is Unixcentric and most new admins leave echo open, echo will reveal far more about a machine than a ping. Could it be that this is the intent? Sorry for the paranoia. -- Jay [snip] > In the course of determining the best suited POP, Global Dispatch preforms > a latency measurement. This latency measurement is done by making a > connection to the client DNS server on TCP port 7 and then dropping > the connection. > > After the latency measurement has been done, the latency values are > cached, and the IP of the most responsive POP is returned to the > requesting machine. > > I hope this help clear up the confusion. We are looking into other ways to > preform this latency mesurment, and hope we have not caused you any > inconvenience. > > -- > Resonate Technical Support > > > ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ > Richard Day Call Center Manager > > Resonate, Inc. > 465 Fairchild Drive > Suite 115 > Mountain View, CA 94040 > > Main Phone 650 967.6500 > Fax 650 967.6561 > Support Line 650 967.4800 > ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ > >> Regards, >> Juha >> >> >> > >-- >---------------------------------------------------------------------- >Please refer to the information about this list as well as general >information about Linux security at http://www.aoy.com/Linux/Security. >---------------------------------------------------------------------- > >---///-///-///-/-//----///-///-/////--Ed Porter secure @ r0ck.com >--/---/-/-/---///-----/---/-/-/-/-/--1306 P R 820 Mingus TX 76463 >-/---///-///-/-//-//-///-///-/---/--254.968.5199 Fax 254.968.6504 To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-security" in the body of the message