Re: attack alert on port 1080

From: HoytDuff (hoyt_at_cavtel.net)
Date: 08/17/03

  • Next message: Kevin Fjelsted: "Question about automating printing of Email attachments" 
    To: redhat-list@redhat.com
Date: Sat, 16 Aug 2003 23:09:25 -0400

    On Saturday 16 August 2003 22:40, MKlinke wrote:
    > port 1080

    >From http://www.robertgraham.com/pubs/firewall-seen.html

    1080
    SOCKS
     This protocol tunnels traffic through firewalls, allowing many people behind
    the firewall access to the Internet through a single IP address. In theory,
    it should only tunnel inside traffic out towards the Internet. However, it is
    frequently misconfigured and allows hackers/crackers to tunnel their attacks
    inwards, or simply bounce through the system to other Internet machines,
    masking their attacks as if they were coming from you. WinGate, a popular
    Windows personal firewall, is frequently misconfigured this way. 

    -- 
Hoyt
-- 
redhat-list mailing list
unsubscribe mailto:redhat-list-request@redhat.com?subject=unsubscribe
https://www.redhat.com/mailman/listinfo/redhat-list
  • Next message: Kevin Fjelsted: "Question about automating printing of Email attachments"

    Relevant Pages

    • IPSec tunneling problem
      ... We have a central office which is separated from the Internet with firewall running Linux 2.4 and FreeSWAN. ... I'm trying to create an IPSec tunnel to the central office from another small branch office, using FreeBSD 6.2 with it's integrated IPSec and ipsec-tools. ... The tunneling is generally working, both internal networks can see each other, but I'm having some problems with traffic originating from the FreeBSD firewall itself. ...
      (freebsd-net)
    • Re: Exchange Outlook und Sygate Personal Firewall
      ... > Ich versuche per Outlook mein Exchange Postfach abzurufen. ... wenn meine Sygate Personal Firewall deaktiviert ist. ... Ich hab deinen Beitrag so verstanden, daß der Tunnel nur aufgebaut ...
      (microsoft.public.de.exchange)
    • Re: Telnet over WAN latency troubleshooting
      ... up an SNMP rule on the firewall central site firewall and let the Alpha ... the tunnel they should not be aware of the traffic type... ... either to the customer central site or our own location. ... the latency is very obvious; when we telnet back to ...
      (comp.os.vms)
    • RE: How safe is a VPN connexion from within an internal network?
      ... Your biggest problem will be that with a tunnel originating behind your ... firewall, all the tunnel traffic through your firewall is encrypted and ... How safe is a VPN connexion from within an internal network? ... EARN A MASTER OF SCIENCE IN INFORMATION ASSURANCE - ONLINE ...
      (Security-Basics)
    • RE: [fw-wiz] so much for "deny all"
      ... Despite the obvious problems firewall vendors are ultimately ... tunnel traffic over innocuous ports. ... Kerry Thompson, CCNA CISSP ...
      (Firewall-Wizards)