Here is a bit of info. Port 524: Used by NetWare http://razor.bindview.com/publish/advisories/adv_novellleak.html http://lists.insecure.org/incidents/2000/Nov/0015.html http://support.novell.com/cgi-bin/search/searchtid.cgi?/10013531.htm
Port 445: Used as a new replacement for 137,139 Smb ports. http://support.microsoft.com/default.aspx?scid=kb;EN-US;q204279 http://www.newsbytes.com/news/01/169408.html Cheers edt ----- Original Message ----- From: "Michael D. Schleif" <[EMAIL PROTECTED]> To: "LEAF" <[EMAIL PROTECTED]> Sent: Wednesday, January 09, 2002 12:58 PM Subject: [Leaf-user] tcp ports 445 & 524 ??? > > We are managing several remotely located DCD firewalls. > > Yesterday, on one of these firewalls, we began seeing several of these: > > Jan 8 17:12:31 trout kernel: Packet log: input DENY eth0 PROTO=6 > a.b.c.157:63882 x.y.z.86:524 L=48 S=0x00 I=15350 F=0x4000 T=112 SYN > (#45) > > Jan 8 17:12:55 trout kernel: Packet log: input DENY eth0 PROTO=6 > a.b.c.157:63884 x.y.z.86:445 L=48 S=0x00 I=15570 F=0x4000 T=112 SYN > (#45) > > Coincidentally, around these same times -- *no* direct correlation, yet > -- we were doing testing, trying to get windoze networking working > across the ipsec gateways, also established between these same two > firewalls. > > However, a.b.c and x.y.z are the un-encrypted, external addresses of > these firewalls. > > <http://www.echogent.com/cgi-bin/fwlog.pl> doesn't really answer the > questions about what is happening here. > > What do you think? > > -- > > Best Regards, > > mds > mds resource > 888.250.3987 > > Dare to fix things before they break . . . > > Our capacity for understanding is inversely proportional to how much we > think we know. The more I know, the more I know I don't know . . . > > _______________________________________________ > Leaf-user mailing list > [EMAIL PROTECTED] > https://lists.sourceforge.net/lists/listinfo/leaf-user > _______________________________________________ Leaf-user mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/leaf-user
