OT: RC Vaccine?

George Toft plug-discuss@lists.PLUG.phoenix.az.us
Fri, 10 Aug 2001 07:51:01 -0700


Which makes me wonder about the port 80 accesses from the porn server
that my firewall blocked.  I did an nslookup/whois, and thought it
was a dialup user (I seem to remember the host was dialtone.net or
something like that).  An old associate used a web browser (duh!) and 
told me it was a porn site.  I used my browser, went to the IP address 
and was greeted with an Apache login dialog.  When I did that, nothing 
showed up in my logs.

Things that make you go Hmmm....

George


Gary Nichols wrote:
> 
> Yep, that was me.  AFAIK, the only ports that Qwest are blocking are 25,
> 53, 80 -- so you shouldn't see any attempted hits for mail,dns or http
> exploits on your VDSL firewall's outside IP address. If you do, please
> let me know... I'll run comparable tests on my systems.
> 
> !G!
> 
> On 09 Aug 2001 08:08:22 -0700, George Toft wrote:
> > Hi Gary,
> >
> > Looking at my logs, I must agree with you on port 80.  I had one port
> > 139 probe: 209.219.243.7.  Is this you?
> >
> > I have a Linux firewall, then my LAN - just like I preach on this list
> > and my website.
> >
> > I do have a hub in the public side, but it is for plugging in the
> > company laptop.  I am not about to mix their system with mine.
> >
> > George
> >
> > =
> 
> ________________________________________________
> See http://PLUG.phoenix.az.us/navigator-mail.shtml if your mail doesn't post to the list quickly and you use Netscape to write mail.
> 
> PLUG-discuss mailing list  -  PLUG-discuss@lists.PLUG.phoenix.az.us
> http://lists.PLUG.phoenix.az.us/mailman/listinfo/plug-discuss