--On Friday, April 12, 2002 12:15 PM -0500 Matthew
Carpenter <[EMAIL PROTECTED]> wrote:
>
>
> Should you ALWAYS ignore activity on port 113? I know
> that Mail servers commonly respond to requests for e-mail
> with a quick authentication check on port 113 to make
> sure the requesting computer is who it says it is, but
> isn't it also an old hacker tap? Maybe if you get high
> activity you should be wary?
>
>
>
> Matthew Carpenter, MCP, CNA, A+
>
> Network Engineer and Exchange Administrator
You can always send a block activity to port 113 and send a
reset packet back to the other mail host. If you simply
silently drop packets to 113, your mail transfers may take
too long.
--truman
_______________________________________________
Firewalls mailing list
[EMAIL PROTECTED]
http://lists.gnac.net/mailman/listinfo/firewalls
