Re: Socks port 1080

[rmclean () NATDOOR COM (Randy Mclean)]

Well from what I've seen, people will scan entire ranges of Ip's only
looking socks and proxy ports(1080 and 8080). There are alot of people who
do this for many reasons, but bigest reason is for spam. Many spamers will
find as many socks proxies as they can use your computer as a relay to your
isp mail/news server. If have a socks port open, SECURE IT. In my
experience a Firewall works great if properly configured also some socks
proxy software will have setting for allowing ip's only a few
hosts(generally a good idea to use RFC 1918 address) . I hope this helps!

At 09:41 AM 1/20/00 -0800, Heman Leopando wrote:
> Any reason why someone would connect to port 1080?
>
> Are they using it as a bounce server for IRC?
>
> ==============================================
> Heman Leopando
> MIS/Network Manager
> Quicknet Technologies
> (415)864-5225 x52
> www.quicknet.net

--
Randy Mclean
Security/Network Administrator
rmclean () natdoor com