On Thu, Jul 31, 2003 at 12:10:03PM +1200, Nick Rout wrote:
> On Thu, 31 Jul 2003 11:51:11 +1200 Matthew Gregan
> <[EMAIL PROTECTED]> wrote:
> > Port 445 is Microsoft-DS, which is mostly used for SMB/CIFS-over-IP.
> IP cop uses 445 for secure web services to the ipcop box itself,
> leaving 443 available to be forwarded onto an internal server if you
> want (is on the port you would normally find it).
Right. Thanks for the heads-up, Nick. It seems to be that 445 is a bad
choice, given that it is already a "well-known", IANA allocated port...
and it would certainly explain why Chris' IPCop box is logging packets
to this port--they are most likely to be SMB/CIFS scans, unless, of
course, there are exploits for IPCop's administration interface
available.
Cheers,
-mjg
--
Matthew Gregan |/
/| [EMAIL PROTECTED]
