~ > what are these? I know that somebody is trying to connect to my machine
~ > on ports where i do not want this to happen - i secured these ports
~ > quite a while ago now, but what interests me is: what are these people
~ > trying to do? is this sort of special scanning? breakin attempts? all of
~ > my gateway machines are running linux, just in case this matters
They could either look for troyaned tcpd wrappers (if you happen to know
what source ports of these connections were), or just they could be kids,
who connected to your pop3 ports looking for vulneriable poppers and
telneting your machine to find out what you're running there. (this is
common to check telnet banners for this purpose).
--
[EMAIL PROTECTED] http://www.kalug.lug.net
-
[To unsubscribe, send mail to [EMAIL PROTECTED] with
"unsubscribe firewalls" in the body of the message.]
