-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
>----Original Message-----
>From: [EMAIL PROTECTED]
>[mailto:[EMAIL PROTECTED]] Sent: Wednesday, August
>23, 2000 7:49 PM
>
> Actually an SMTP server sends packets full of data whereas Telnet
> sends one character in each data packet. This an easily >
> detectable difference. Raptor generates a log entry when it
> detects this type of activity. I agree with you on the rejecting
> SMTP connection because they are Telnet connections. Seems
> pointless.
Which can easily be defeated with tools like Netcat that spit out a
whole packet full of data. Is anyone aware of an IDS or firewall
software that detects the time difference in these packets (manually
entered data lags behind).
Frank
-----BEGIN PGP SIGNATURE-----
Version: PGP Personal Privacy 6.5.1
Comment: PGP or S/MIME (X.509) encrypted email preferred.
iQA/AwUBOaR3XURKym0LjhFcEQJPnACfSNXNi+Ajw0sSFUYkatOkUBupZMEAnR3U
mTg0lF3n1+LQR/WXVu0vuHt0
=MB6n
-----END PGP SIGNATURE-----
-
[To unsubscribe, send mail to [EMAIL PROTECTED] with
"unsubscribe firewalls" in the body of the message.]