hi Anantha,

Open Ports are usually used by inbound or outbound TCP or UDP-Services.
While inbound Services usually wait for a connection on a specific port
(HTTP mostly at Port 80, POP3 at 110, etc), outbound connections open
arbitrary ports to communicate with the "inbound" services.

As lecture i would recommend you a book about the TCP/IP-family, this is
usually seen as general knowledge.

Open Ports often are some kind of security risk, since the many "inbound"
services suffer from security problems which could result in a system
compromise (clear text: Somebody could get in your system in an unauthorized
way and do bad stuff ;-).

You can close open ports by simply deactivating the service using this port
or by using a firewall to filter inbound connections to ports you don't want
to be accessed remote from all or specific adresses.

You can open closed ports in a useful way by installing services which use
these Ports. You also can open a port with "netcat" or some other programs,
which listens for inbound connections but doesn't actually do anything.








OK, now about your E-Mail Problem. Just have a look at the header of the
E-Mails (since it seems that you are using a Webmail-Client it could be that
the headers are not shown. Use an e-Mail Software to download the mails
then).

For this example i take your e-mail:

------------------------------
Return-Path: <[EMAIL PROTECTED]>
X-Flags: 0000
Delivered-To: GMX delivery to [EMAIL PROTECTED]
Received: (qmail 27982 invoked by uid 0); 20 Mar 2002 07:30:39 -0000
Received: from lists.gnac.net (209.182.195.144)
  by mx0.gmx.net (mx010-rz3) with SMTP; 20 Mar 2002 07:30:39 -0000
Received: from lists.gnac.net (localhost [127.0.0.1])
 by lists.gnac.net (Postfix) with ESMTP
 id 0125B10539; Tue, 19 Mar 2002 23:30:12 -0800 (PST)
Delivered-To: [EMAIL PROTECTED]
Received: from mailweb29.rediffmail.com (unknown [203.199.83.149])
 by lists.gnac.net (Postfix) with SMTP id 9207810526
 for <[EMAIL PROTECTED]>; Tue, 19 Mar 2002 23:26:29 -0800 (PST)
Received: (qmail 15158 invoked by uid 510); 20 Mar 2002 07:23:08 -0000
Message-ID: <[EMAIL PROTECTED]>
Received: from unknown (61.11.80.243) by rediffmail.com via HTTP; 20 Mar
2002 07:23:08 -0000
MIME-Version: 1.0
From: "Anantha Krishnan" <[EMAIL PROTECTED]>
Reply-To: "Anantha Krishnan" <[EMAIL PROTECTED]>
To: [EMAIL PROTECTED]
Subject: P
Content-type: text/plain;
 format=flowed
Content-Disposition: inline
Sender: [EMAIL PROTECTED]
Errors-To: [EMAIL PROTECTED]
X-BeenThere: [EMAIL PROTECTED]
X-Mailman-Version: 2.0.5
Precedence: bulk
List-Help: <mailto:[EMAIL PROTECTED]?subject=help>
List-Post: <mailto:[EMAIL PROTECTED]>
List-Subscribe: <http://lists.gnac.net/mailman/listinfo/firewalls>,
 <mailto:[EMAIL PROTECTED]?subject=subscribe>
List-Id: Firewalls <firewalls.lists.gnac.net>
List-Unsubscribe: <http://lists.gnac.net/mailman/listinfo/firewalls>,
 <mailto:[EMAIL PROTECTED]?subject=unsubscribe>
List-Archive: <http://lists.gnac.net/pipermail/firewalls/>
Date: 20 Mar 2002 07:23:08 -0000
--------------


This line indicates from which IP-Adress this E-Mail was sent:

Received: from unknown (61.11.80.243) by rediffmail.com via HTTP; 20 Mar
2002 07:23:08 -0000



The "sending information" is some kind of reversed, the first node (where
the E-Mail came from) is nearer the bottom than the information where the
mail was forwarded and finally received.



-------------------------------------------------------
BlueScreen / Florian Hobelsberger (UIN: 101782087)
Member of:
www.IT-Checkpoint.net
www.Hackeinsteiger.de
www.NGSecurity.de
www.DvLdW.de.vu

F�r Fragen im Bereich Datensicherheit wenden Sie sich bitte an:
www.Hackeinsteiger-Board.de
www.Securitypoint-board.de.vu

==================================================================
This email and any files transmitted with it are confidential and
intended solely for the use of the individual or entity to whom
they are addressed.
Forwarding this E-Mail or parts of information out of it is strictly
forbidden -
legal actions may be taken.

If you are not the intended recipient or the person responsible for
delivering to the intended recipient, be advised that you have received
this email in error and that any use of the information contained within
this email or attachments is strictly prohibited.

Internet communications are not secure and BlueScreen/Florian Hobelsberger
does not accept
any legal responsibility for the content of this message. Any opinions
expressed in the email are those of the individual and not necessarily
those of the Company.

If you have received this email in error, or if you are concerned with
the content of this email please notify the Sender by telephone
on +49 (0)162 337 98 40.
==================================================================

To encrypt classified messages, please use this PGP-Key:

-----BEGIN PGP PUBLIC KEY BLOCK-----


mQGiBDoSjNYRBADwxmFyGCYJVVwoYx6jh69D7Kbu5vLmLGz4LqW7ukFa5YhsdQ2g
hqw7iH4FL7UXSyvnQR2O+avrZtn6JgiLr9YvEBuGR4KwmNHzNAdWt1ftPqL/4932
K20XOfzewatJf23gpzpxQ6q7qqN0XKW9zvmBpJqNNosOBbj/Q4257Dao1QCg/9lI
77kKxR9HkiFnFWstiQ/tfOUD/jLogwExYHYYhqKoLG7Pgv+K1+64LXHrwiU53udP
PyIBLMx+/nD11dT9GcgH8BKqqYNIewBtTUfe4TzNqdmyOHkGzSk/uWagopXVAWYe
lwrFjHSbL5Hgkyuxu26O5UzJeIM74X2lTpXMS2Xeas5/9OGCEZEcrgLzcpwup/Ww
L4jCA/9ScTZ7hJlLAF8SsmKtG06UpTLhbHj2JHLYpuS9okcW+tf7KIoc1BytqJyX
VwTB3dCZQHzlCBd515k/9n+G2IWmUhh4FWyIOcf9pUPvrrxg6cUMs2C9p5pan0dW
huCCXtqOo/ii8QShwJ1Z2QgclNqa7NU9zKWKLAvdEhlzCtofBLRELT1CbHVlU2Ny
ZWVuPS0gLyBGbG9yaWFuIEhvYmVsc2JlcmdlciAoMjkuMTEuMjAwMSkgPE11bmlj
aEFDQGdteC5kZT6JAFgEEBECABgFAjoSjNYICwMJCAcCAQoCGQEFGwMAAAAACgkQ
lZAUaM5lFc7p+QCgwueO8h1r+tePys2abqKrpYTJNTcAmwcgd0zQ5pS9pWf6qqIs
WlET5qgluQQNBDoSjNYQEAD5GKB+WgZhekOQldwFbIeG7GHszUUfDtjgo3nGydx6
C6zkP+NGlLYwSlPXfAIWSIC1FeUpmamfB3TT/+OhxZYgTphluNgN7hBdq7YXHFHY
UMoiV0MpvpXoVis4eFwL2/hMTdXjqkbM+84X6CqdFGHjhKlP0YOEqHm274+nQ0YI
xswdd1ckOErixPDojhNnl06SE2H22+slDhf99pj3yHx5sHIdOHX79sFzxIMRJitD
YMPj6NYK/aEoJguuqa6zZQ+iAFMBoHzWq6MSHvoPKs4fdIRPyvMX86RA6dfSd7ZC
LQI2wSbLaF6dfJgJCo1+Le3kXXn11JJPmxiO/CqnS3wy9kJXtwh/CBdyorrWqULz
Bej5UxE5T7bxbrlLOCDaAadWoxTpj0BV89AHxstDqZSt90xkhkn4DIO9ZekX1KHT
UPj1WV/cdlJPPT2N286Z4VeSWc39uK50T8X8dryDxUcwYc58yWb/Ffm7/ZFexwGq
01uejaClcjrUGvC/RgBYK+X0iP1YTknbzSC0neSRBzZrM2w4DUUdD3yIsxx8Wy2O
9vPJI8BD8KVbGI2Ou1WMuF040zT9fBdXQ6MdGGzeMyEstSr/POGxKUAYEY18hKcK
ctaGxAMZyAcpesqVDNmWn6vQClCbAkbTCD1mpF1Bn5x8vYlLIhkmuquiXsNV6z3W
FwACAhAAyeDU/CZegfCp3VmSKfIorYKjbtvSpriZ3KMmD9Qp9GlxwxJOQWUuqtPT
WMJnBwXgYKW34jvSw5gDBByOrzHyqolaKvqjG6QXenWcAt2Z5KkIUEFBHrFxUSr4
gwCexwLW1NxGILE6j4O1ZpWj5BJQTqZZpJzJarnzv2cXof0VK8SJodEEu21VHzxP
yvU2FTmwsPU5fs+6mppkPdZgb0cqmNTVqak0xyfZzPd4lLOEZIuauOoruTE0a6XV
AEx/ns5uY/U16FNq1WNaeJIulGZZNLT5DXwpGPqxm05XRineI8U2mgw+1KVGOnXM
1YfFAIjkpwy9zjjT752m3KNLe3wiWjF+SeH9USCm9KtQZHYQn6jB1hY67rKT2m8p
G1qBdbb2sZJCJRlROCe4W/vxevRe7TGdYaNy/hvV7i4OMl/pmeRnKqTpdLLP0Nah
2Cqa7+ddKdwdVtGxzowqKtQOzLF3wnXoixHtKtK8AG2gEa74rsuUamt6alnkFxKQ
SsaufCEa6aw/ttJHSEX9HHsbsJ+nmp2RRB+K8Eawln2LZliMb9xnZa3OGMwvkJCU
ZyGurrezM8MKGID5PsvV0z/jXP4yhy+Y0szYks2xbq6yAxa86D3LH/AC++l1tV6s
iw49duIvnFrlTPzY5qF8P0ywxVbSnXHl+TrVPUsWV8Z4L0mPA4uJAEwEGBECAAwF
AjoSjNYFGwwAAAAACgkQlZAUaM5lFc537wCgrEO460bbrm220zd9Mn9Nv/IB9LcA
oNeYVeRb2JfeQJkMwu7bfaCqEuoz
=Vkyz
-----END PGP PUBLIC KEY BLOCK-----


_______________________________________________
Firewalls mailing list
[EMAIL PROTECTED]
http://lists.gnac.net/mailman/listinfo/firewalls
  • P Anantha Krishnan
    • RE: P Florian Hobelsberger / BlueScreen
    • RE: P Hiemstra, Brenno

Reply via email to