Date sent: Sun, 13 Dec 1998 14:02:36 -0500 (EST) From: Joseph Keen <[EMAIL PROTECTED]> To: Ford Prefect <[EMAIL PROTECTED]> Copies to: linux-net <[EMAIL PROTECTED]>, Linux Admin List <[EMAIL PROTECTED]> Subject: Re: TCP port 7 inquiry > Steve, > This may sound kinda odd but I'm pretty sure that ping uses port 7 to get > and echo back. Check out the man page for it, first paragraph after the > options section. > --Joe I'm sure it a normal ping doesn't use TCP nor UDP port 7 to get and echo back. It uses ICMP Echo Request packet, and get back and ICMP Echo reply packet christophe leroy > > > I just installed "sentry", which is an acitve port-blocker, checks for > > portscans and adds that IP to /etc/hosts.deny and ipfwadm.. it seems to be > > working great, but I do have a question: > > > > Why would systems from all over be connecting to TCP port 7 constantly? I > > get connections from places like gtecablemodem.com, kmitnick.stl.doe.gov, > > k0dez.pbx.org, wootshell.com (not a typo), smoke.da.marjuana.net, > > metalupyourass.com, and many more which look like normal ISPs, dialins, > > you name it. Why is this going on? Is it just random checking for > > something, or is there more to it? > > > > --- > > Steve Huston - Rowan University Comp Sci Major > > New Jersey, USA > > PGP Public keys: > > DSS/DH 0x0A529FF8 fp: C38F 274B F2A8 CE5A 60A5 A8E9 C7B9 AEDD 0A52 9FF8 > > RSA 0xC373028D fp: ADE0 854D 753E EB53 9DFA 5F04 8283 CC99 > > > > "And no one sings me lullabies, > > and no one makes me close my eyes; > > And so I throw the windows wide > > and call to you across the sky" --Pink Floyd, "Echoes" > > > > -====---====---====---====---====---====---====---====---====---====---====- > > to unsubscribe email "unsubscribe linux-admin" to [EMAIL PROTECTED] > > See the linux-admin FAQ: http://www.kalug.lug.net/linux-admin-FAQ/ > > > > - > To unsubscribe from this list: send the line "unsubscribe linux-net" in > the body of a message to [EMAIL PROTECTED] > - To unsubscribe from this list: send the line "unsubscribe linux-net" in the body of a message to [EMAIL PROTECTED]