Security Incidents mailing list archives

Re: twinkie


From: paul () MOQUIJO COM (Paul Cardon)
Date: Fri, 18 Feb 2000 11:17:06 -0500


Robert Graham wrote:

See:
http://www.robertgraham.com/pubs/firewall-seen.html#port113
This is normal behavior from SMTP, POP, and IMAP servers so that they can
log the UNIX user name on the TCP connection. If you block it with a
firewall, your e-mail connections might timeout.

Depends on if you block or reject.  If you reject, the auth request will
fail immediately rather than time out.

-paul


Current thread: