TO UNSUBSCRIBE: email "unsubscribe issforum" in the body of your message to
[EMAIL PROTECTED] Contact [EMAIL PROTECTED] for help with any problems!
----------------------------------------------------------------------------
When I get a "BackOrifice" alert on RealSecure, what events occur that show this
alert? Is it just looking for connections to port 31337? Is it smart enough to
actually look into the traffic and see something specific to Back Orifice, or does it
just look for a tcp connection on that port? It would help a lot if ISS included more
information on the signatures... Maybe a resource exists on what EXACTLY is being
found when an alert is sounded, but I am unaware of it?
David Yong
(310) 812-3994
