Re: [PEN-TEST] Implications for "Looking around?" [FBI confiscation of allegely curious student]

[Nexus <nexus () PATROL I-WAY CO UK>]

----- Original Message -----
From: "David Ford" <david () LINUX COM>
To: <PEN-TEST () SECURITYFOCUS COM>
Sent: Wednesday, November 01, 2000 5:39 PM
Subject: Re: Implications for "Looking around?" [FBI confiscation of
allegely curious student]
[snip]

> The normal visitor doesn't connect to a variety of ports and do zone
> transfers.  This activity is surely what brought him above the noise
> level.  Any investigator worth his beans would take note.
[snip]

Maybe, maybe not - if you are using one of the many internet based domain
query tools, then at some point it may be doing a dig -axfr...   Is it any
different using nslookup and doing an ls -d ?   Or is the former a better
way of 'hiding' yourself ?
Neither method is malicious in itself.
#include    <standard_intent_vs_action.h>
;-)

Regards,
            JJ


____________________________________________
http://1cis.com
Free E-mail Servers with unlimited mailboxes
1st Class Internet Solutions