Skip site navigation (1)Skip section navigation (2)
Date:      Mon, 24 May 1999 15:22:29 +0100 (BST)
From:      Kiril Mitev <kiril@ideaglobal.com>
To:        des@flood.ping.uio.no (Dag-Erling Smorgrav)
Cc:        greg@qmpgmc.ac.uk, freebsd-security@FreeBSD.ORG
Subject:   Re: Server trying to connect to Port 113
Message-ID:  <199905241422.PAA02615@idea.co.uk>
In-Reply-To: <xzp7lpymurp.fsf@localhost.ping.uio.no> from "Dag-Erling Smorgrav" at May 24, 99 04:01:30 pm

next in thread | previous in thread | raw e-mail | index | archive | help
> 
> "Greg Quinlan" <greg@qmpgmc.ac.uk> writes:
> > So will it effect anything by opening port 113? ...(getting 2000 or so log
> > entries from the same server)
> 
> Don't log, or at least, don't log connections to ports to which you
> excpect benign (if misguided) traffic, such as auth and the netbios
> ports.

i beg to disagree, any access attempt from 'outside' to any netbios
ports are 99% indicative of a break-in attempt.

in my experience, at least

K

> 
> DES
> -- 
> Dag-Erling Smorgrav - des@flood.ping.uio.no
> 
> 
> To Unsubscribe: send mail to majordomo@FreeBSD.org
> with "unsubscribe freebsd-security" in the body of the message
> 



To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-security" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?199905241422.PAA02615>