From owner-freebsd-security Thu Aug 13 09:44:26 1998 Return-Path: Received: (from majordom@localhost) by hub.freebsd.org (8.8.8/8.8.8) id JAA24250 for freebsd-security-outgoing; Thu, 13 Aug 1998 09:44:26 -0700 (PDT) (envelope-from owner-freebsd-security@FreeBSD.ORG) Received: from shell6.ba.best.com (shell6.ba.best.com [206.184.139.137]) by hub.freebsd.org (8.8.8/8.8.8) with ESMTP id JAA24039 for ; Thu, 13 Aug 1998 09:43:36 -0700 (PDT) (envelope-from jkb@best.com) Received: from localhost (jkb@localhost) by shell6.ba.best.com (8.9.0/8.9.0/best.sh) with SMTP id JAA04396; Thu, 13 Aug 1998 09:42:53 -0700 (PDT) X-Authentication-Warning: shell6.ba.best.com: jkb owned process doing -bs Date: Thu, 13 Aug 1998 09:42:52 -0700 (PDT) From: "Jan B. Koum " X-Sender: jkb@shell6.ba.best.com To: Matthew Hunt cc: Marius Bendiksen , Brett Glass , freebsd-security@FreeBSD.ORG Subject: Re: UDP port 31337 In-Reply-To: <19980812224614.B8987@astro.psu.edu> Message-ID: MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII Sender: owner-freebsd-security@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.org Uhm.. duh. Of course you can spoof port scan, but the point of the port scan is to know what port are open. There are many other ways to get someone in trouble. Now this thread is officially dead. :) -- Yan www.best.com/~jkb/ Unix users of the world unite: www.{free,open,net}bsd.org | www.linux.org | www.apache.org | www.perl.com "Turn up the lights, I don't want to go home in the dark." On Wed, 12 Aug 1998, Matthew Hunt wrote: >On Wed, Aug 12, 1998 at 02:55:59PM -0700, Jan B. Koum wrote: > >> AFAIK IP spoofing is "blind" - you can't be doing spoofing IP >> during a portscan. Hence, if someone to portscan class B for udp port >> 31337, the ought to do it from the real IP. Now the fact that this IP >> might belong to someone else (cracked account, etc) is another matter. > >At least one (quite effective) port scanner supports IP spoofing. >True, the user doesn't get the results. The purpose is to get >somebody else in trouble for port scanning. > >-- >Matthew Hunt * Inertia is a property of matter. >http://www.pobox.com/~mph/pgp.key for PGP public key 0x67203349. > >To Unsubscribe: send mail to majordomo@FreeBSD.org >with "unsubscribe security" in the body of the message > To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe security" in the body of the message