Someone might be trying to see if you have a socks server, and if it allows
requests from outside your domain. They can then use your socks server to
"mask" their real address. I had someone trying to do that with our socks
server. Fortunatly I had it set up only to allow from within my domain.
Russ Mellon
Head Computer Technician
School City of Hobart
http://www.hobart.k1.2in.us
[EMAIL PROTECTED]
> -----Original Message-----
> From: Aaron Turner [mailto:[EMAIL PROTECTED]]
> Sent: Wednesday, November 03, 1999 11:08 AM
> To: [EMAIL PROTECTED]
> Subject: Re: [OT] apparent scans to port 1080
>
>
>
> Socks port scans happen *all the time*. At least where I work, we get
> full scans for socks about once a week. No big deal for me since we don't
> run socks. :-)
>
> --
> Aaron Turner, Core Developer http://vodka.linuxkb.org/~aturner/
> Linux Knowledge Base Organization http://linuxkb.org/
> Because world domination requires quality open documentation.
>
> On Thu, 4 Nov 1999, Greg W wrote:
>
> > Hi all
> >
> > just wondering why anyone would be trying port 1080 from
> multiple hosts, no
> > other ports, it would seem that someone is looking for a socks
> server, its
> > a concern because a lot appear to be from within the same
> domain, just want
> > to make sure that there is no legit way these could be ending up in my
> > network.
> >
> > Is this sort of thing something that cert will take interest in
> ? I imagine
> > they would be run off thier feet by such things.....
> >
>
>
> --
> To unsubscribe: mail [EMAIL PROTECTED] with "unsubscribe"
> as the Subject.
>
--
To unsubscribe: mail [EMAIL PROTECTED] with "unsubscribe"
as the Subject.
