From owner-freebsd-security Thu May 31 2:28:23 2001 Delivered-To: freebsd-security@freebsd.org Received: from internethelp.ru (wh.internethelp.ru [212.113.112.145]) by hub.freebsd.org (Postfix) with ESMTP id 518C137B43F for ; Thu, 31 May 2001 02:28:16 -0700 (PDT) (envelope-from nkritsky@internethelp.ru) Received: from ibmka (ibmka.internethelp.ru. [192.168.0.6]) by internethelp.ru (8.9.3/8.9.3) with SMTP id NAA45092 for ; Thu, 31 May 2001 13:28:07 +0400 (MSD) Message-ID: <007701c0e9b3$fee0ff70$0600a8c0@ibmka.internethelp.ru> From: "Nickolay A. Kritsky" To: Subject: Re: port 21 Date: Thu, 31 May 2001 13:28:01 +0400 MIME-Version: 1.0 Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: 8bit X-Priority: 3 X-MSMail-Priority: Normal X-Mailer: Microsoft Outlook Express 4.72.3110.5 X-MimeOLE: Produced By Microsoft MimeOLE V4.72.3110.3 Sender: owner-freebsd-security@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.org My opinion is that unknown scanner was hoping to meet one of those admins who still use remote port of TCP/UDP packet as filter in their firewall rules (like this: "ipfw allow tcp from any 21"). NKritsky - SysAdmin InternetHelp.Ru http://www.internethelp.ru e-mail: nkritsky@internethelp.ru -----Original Message----- From: Lim Seng Chor To: freebsd-security@FreeBSD.ORG Date: 31 мая 2001 г. 13:01 Subject: port 21 my kernel message showing: Connection attempt to TCP 202.184.64.29:21 from 213.137.2.195:21 anyone can explain why 213.137.2.195 can use port 21 to connect to my ftp port but not random port above 1024? To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-security" in the body of the message To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-security" in the body of the message