Security Incidents mailing list archives

RE: Pubstro rash

From: "Steve Drees" <drees () rangebroadband com>
Date: Thu, 17 Mar 2005 15:51:25 -0600

3.  Instead of a random high port, the installed FTP server
listens on port 53.  Which I can't block, because DNS may
need to use it, right?


But, you know where your DNS servers are right?

Allow all connections to port 53 of your DNS servers
Deny all connections to port 53 on any other IP.

Current thread:

strange software > winsupdater.exe SDA (Mar 15)
- Re: strange software > winsupdater.exe Nick FitzGerald (Mar 16)
  - Re: strange software > winsupdater.exe Justin (Mar 16)
    - Re: strange software > winsupdater.exe Jeremy Anderson (Mar 17)
    - Re: strange software > winsupdater.exe Nick FitzGerald (Mar 28)
    - Re: strange software > winsupdater.exe Paul Laudanski (Mar 28)
    - Pubstro rash David Gillett (Mar 17)
    - Re: Pubstro rash Mark Coleman (Mar 17)
    - RE: Pubstro rash Steve Drees (Mar 17)
    - RE: Pubstro rash Alexandre Skyrme (Mar 17)
    - Re: Pubstro rash Jeff Kell (Mar 18)
    - RE: Pubstro rash David Gillett (Mar 18)
- Re: strange software > winsupdater.exe Mike Barushok (Mar 16)
- <Possible follow-ups>
- Re: strange software > winsupdater.exe Harlan Carvey (Mar 16)
- RE: strange software > winsupdater.exe Jim Harrison (ISA) (Mar 16)
- RE: strange software > winsupdater.exe Harlan Carvey (Mar 16)
- Re: strange software > winsupdater.exe dave_mikesch (Mar 16)
- RE: strange software > winsupdater.exe Jim Harrison (ISA) (Mar 16)
- Re: strange software > winsupdater.exe Harlan Carvey (Mar 17)

(Thread continues...)