Date: Tue, 9 Sep 2003 08:25:47 -0700 From: Randy Bush <randy@psg.com> To: Ben Smithurst <ben@FreeBSD.org> Cc: freebsd-security@freebsd.org Subject: Re: is one of my hosts a scanner? Message-ID: <E19wkNI-000BVo-Hp@ran.psg.com> References: <E19wavc-000LTN-VI@ran.psg.com> <20030909081309.GA22828@strontium.bh.smithurst.org>
next in thread | previous in thread | raw e-mail | index | archive | help
>> seq my host victim(s) >> --- ---------------- --------------- >> 24) 192.168.0.2:1121 <--> 216.52.3.2:2703 >> 25) 192.168.0.2:1122 <--> 216.52.3.4:2703 >> 39) 192.168.0.2:1124 <--> 216.52.3.2:2703 > > Those hosts are at cloudmark.com, which gets used by > spamassassin (or some part of it). Port 2703 is Razor2 > <http://www.sng.ecs.soton.ac.uk/cgi-bin/faq?_recurse=1&file=16>; - so > that fits as well. <doh!> thanks. so tell me, why does the iana think port 2703 is sms-chat? i.e., why is the port used by razor2 not properly registered as a well known port? randy
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?E19wkNI-000BVo-Hp>