Security Incidents mailing list archives

Re: Port 113 requests?


From: Mike Meredith <mike.meredith () port ac uk>
Date: Fri, 7 Dec 2001 08:54:36 +0000

-----BEGIN PGP SIGNED MESSAGE-----

On Thursday 06 December 2001 20:51, you wrote:
you really should try and specify that the rule "drops" instead of
reject so that the potential intruder is not provided with any
information about their attempted connection.

Won't that cause mail servers that check identd to accept mail very 
slowly ?
- -- 
mike.meredith () port ac uk                http://www.iso.port.ac.uk/~mike
Senior Informatics Officer (Postmaster, Hostmaster, and security)

-----BEGIN PGP SIGNATURE-----
Version: PGP 6.5.8

iQCVAwUBPBCDzM19DFC51SfFAQGbegP/WT8ma+TVKx+MpyZBojXhtfPCUqs25oeX
zapEsM5xbxDDnTlBNMOdvXRNT9l2URjHym75oF7RD/yBohzW3bpCRZjHk4hKQA3z
aZ2X0zXDF3inum7vhKziDBiqij3z6bgDnQEoNXDYnAsq8DRvq/MLjCCQmRjqnio6
d7MHIsQ7H+E=
=5yR8
-----END PGP SIGNATURE-----

----------------------------------------------------------------------------
This list is provided by the SecurityFocus ARIS analyzer service.
For more information on this free incident handling, management 
and tracking system please see: http://aris.securityfocus.com


Current thread: