Our site had begun getting these port 1975 jewels several months back. When
I tracked it down to the originating IPs (several workstations had it..), I
found that the users had downloaded and installed the GoZilla! app. We're
fortunate here in that we have the latitude to deny usage of 'non-approved'
software within our WAN, so the short-term fix was simply to block the port
at the firewall system's inner router (keeps it out of your firewall's
logs), and to notify the users of their 'dead' app. Don't know of other
programs that may use the port, but DO know that it's usage isn't currently
validated at this location. Makes life a *bit* simpler for sysadmins when
the organization is willing to stand behind a documented security policy,
too <smile>.
--Bill
----- Original Message -----
From: <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>; <[EMAIL PROTECTED]>; <[EMAIL PROTECTED]>
Sent: Wednesday, June 23, 1999 12:49 PM
Subject: RE: Port 1975
Gang,
We're experiencing the same sort of weird behavior. Does anyone know of any
other apps/services associated with this port? It's being blocked but the
messages in the logfile is starting to be a real pain.
Regards,
Dennis Keller
Network Security Administrator
DDSP-Z
[EMAIL PROTECTED]
> -----Original Message-----
> From: "Bill Fox" <[EMAIL PROTECTED]> at internet01
> Sent: Wednesday, June 23, 1999 9:09 AM
> To: <[EMAIL PROTECTED]> at internet01; <[EMAIL PROTECTED]> at
> internet01
> Subject: RE: Port 1975
>
>
> Well, one of the users of port 1975 is a little app called
> "GoZilla"... It
> does frequent remote checks using that port. You can find
> more specifics at
> www.gozilla.com.
>
> --Bill
>
> ----- Original Message -----
> From: <[EMAIL PROTECTED]>
> To: <[EMAIL PROTECTED]>
> Sent: Tuesday, June 22, 1999 10:17 AM
> Subject: Port 1975
>
>
>
>
> Hi,
>
> does anyone know, which application want to connect to port 1975???
>
> thanx.
> olaf
>
>
> -
> [To unsubscribe, send mail to [EMAIL PROTECTED] with
> "unsubscribe firewalls" in the body of the message.]
>
>
> -
> [To unsubscribe, send mail to [EMAIL PROTECTED] with
> "unsubscribe firewalls" in the body of the message.]
>
>
-
[To unsubscribe, send mail to [EMAIL PROTECTED] with
"unsubscribe firewalls" in the body of the message.]
