[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: Scanning with reverse connections?

In article <[🔎] 3EDF9A06.10705@travellingkiwi.com> 
hamish@travellingkiwi.com writes:
>I've noticed some strange traffic on our firewalls recently. Someone (Or 
>multiple someones) are attempting to send tcp packets inbound to our 
>network FROM well known ports (e.g. port 80) 

Some firewalls that don't do proper connection tracking can be
bypassed that way.  With a properly configured iptables firewall this
shouldn't be a problem.  ipchains based firewalls are more likely to
fall victom to this trick.

Treat it the same as any other attempt to break into your systems.

Blars Blarson			blarson@blars.org
"Text is a way we cheat time." -- Patrick Nielsen Hayden

Reply to: