Hi
User level client applications (i think) are not allowed to use ports lower
than 1024.
So you may have some reason to think so...

Regards

----- Original Message -----
From: "Jim Meier" <[EMAIL PROTECTED]>
To: "Matthew Cline" <[EMAIL PROTECTED]>
Cc: <[EMAIL PROTECTED]>
Sent: 06 December 2001, Thursday 10:38
Subject: Re: Outgoing connection to port 6000 from port 25...


> On Tue, 2001-12-04 at 04:45, Matthew Cline wrote:
> > I have my firewall setup to stop and log attempts to connect to external
X
> > servers, and this caught three attempts (all in the same second) to
connect
> > to destination port 6000, from a source port of 25 (SMTP).  I don't
think
> > that my qmail server would attempt to make such a connection.  Have I
been
> > rooted?
> >
>
> Source ports do not map the destination ports - they are selected at
> random from any available. There is no reason think you've been hacked,
> on this evidence.
>
> Do your logs show the originating ip?
>
> -Jim


_________________________________________________________
Do You Yahoo!?
Get your free @yahoo.com address at http://mail.yahoo.com

Reply via email to