From owner-freebsd-security@FreeBSD.ORG Tue Sep 9 17:42:21 2003 Return-Path: Delivered-To: freebsd-security@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 58C1116A4BF for ; Tue, 9 Sep 2003 17:42:21 -0700 (PDT) Received: from tenebras.com (blade.tenebras.com [66.92.188.175]) by mx1.FreeBSD.org (Postfix) with SMTP id 2F9AB43FF2 for ; Tue, 9 Sep 2003 17:42:19 -0700 (PDT) (envelope-from kudzu@tenebras.com) Received: (qmail 4726 invoked from network); 10 Sep 2003 00:42:17 -0000 Received: from sapphire.tenebras.com (HELO tenebras.com) (192.168.188.241) by laptop.tenebras.com with SMTP; 10 Sep 2003 00:42:17 -0000 Message-ID: <3F5E7364.7010605@tenebras.com> Date: Tue, 09 Sep 2003 17:42:12 -0700 From: Michael Sierchio User-Agent: Mozilla/5.0 (X11; U; Linux i386; en-US; rv:1.4) Gecko/20030624 X-Accept-Language: en-us, zh-tw, zh-cn, fr, en, de-de MIME-Version: 1.0 To: Bruce M Simpson References: <69749FD8-E303-11D7-AF9F-000393A335A2@mac.com> <3F5E4834.4060409@tenebras.com> <20030909215930.GS1417@spc.org> In-Reply-To: <20030909215930.GS1417@spc.org> Content-Type: text/plain; charset=us-ascii; format=flowed Content-Transfer-Encoding: 7bit cc: freebsd-security@freebsd.org Subject: Re: is one of my hosts a scanner? X-BeenThere: freebsd-security@freebsd.org X-Mailman-Version: 2.1.1 Precedence: list List-Id: Security issues [members-only posting] List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 10 Sep 2003 00:42:21 -0000 Bruce M Simpson wrote: >>IANA *assigns* port numbers 0-1023, and *registers* port numbers 1024-49151. >> >> ... it's definitely a bug >>to use a port registered to another service. > > Perhaps you should take it up with Cloudmark, as they maintain SpamNet > commercially. They may have had good reasons, though, so don't be too > quick to jump on them for doing it. I have no intention of taking it up with Cloudmark, I'm giving up training people for free. > One reason I can think of is to be a bit more obfuscated about how the > SpamNet operates, but given that it's a network for *reporting* spam whose > components has deterministic behaviour, it doesn't really throw spammers > off the scent, if they were to sit down and analyse the product. Shall I speculate why you speculate? I speculate that they don't know what IANA is. For starters. -- "Well," Brahma said, "even after ten thousand explanations, a fool is no wiser, but an intelligent man requires only two thousand five hundred." - The Mahabharata