Security Incidents mailing list archives

RE: Port 113 requests?


From: Jose Nazario <jose () biocserver BIOC cwru edu>
Date: Fri, 7 Dec 2001 16:30:45 -0500 (EST)

On Fri, 7 Dec 2001, Chris Keladis wrote:

The only bad thing about 'rejecting' i can think of, is TCP/IP stack
fingerprinting of the returned RST packet.

as already said, "so what?" you're already connecting to them (to send the
mail), they know you exist and, due to the joys of passive OS
fingerprinting, they know what OS you're running typically.

nothing gained.

____________________________
jose nazario                                                 jose () cwru edu
                     PGP: 89 B0 81 DA 5B FD 7E 00  99 C3 B2 CD 48 A0 07 80
                                       PGP key ID 0xFD37F4E5 (pgp.mit.edu)


----------------------------------------------------------------------------
This list is provided by the SecurityFocus ARIS analyzer service.
For more information on this free incident handling, management 
and tracking system please see: http://aris.securityfocus.com


Current thread: