OT: RC Vaccine?
George Toft
plug-discuss@lists.PLUG.phoenix.az.us
Fri, 10 Aug 2001 07:51:01 -0700
Which makes me wonder about the port 80 accesses from the porn server
that my firewall blocked. I did an nslookup/whois, and thought it
was a dialup user (I seem to remember the host was dialtone.net or
something like that). An old associate used a web browser (duh!) and
told me it was a porn site. I used my browser, went to the IP address
and was greeted with an Apache login dialog. When I did that, nothing
showed up in my logs.
Things that make you go Hmmm....
George
Gary Nichols wrote:
>
> Yep, that was me. AFAIK, the only ports that Qwest are blocking are 25,
> 53, 80 -- so you shouldn't see any attempted hits for mail,dns or http
> exploits on your VDSL firewall's outside IP address. If you do, please
> let me know... I'll run comparable tests on my systems.
>
> !G!
>
> On 09 Aug 2001 08:08:22 -0700, George Toft wrote:
> > Hi Gary,
> >
> > Looking at my logs, I must agree with you on port 80. I had one port
> > 139 probe: 209.219.243.7. Is this you?
> >
> > I have a Linux firewall, then my LAN - just like I preach on this list
> > and my website.
> >
> > I do have a hub in the public side, but it is for plugging in the
> > company laptop. I am not about to mix their system with mine.
> >
> > George
> >
> > =
>
> ________________________________________________
> See http://PLUG.phoenix.az.us/navigator-mail.shtml if your mail doesn't post to the list quickly and you use Netscape to write mail.
>
> PLUG-discuss mailing list - PLUG-discuss@lists.PLUG.phoenix.az.us
> http://lists.PLUG.phoenix.az.us/mailman/listinfo/plug-discuss