Great Circle Associates Firewalls
(January 1995)
 

Indexed By Date: [Previous] [Next] Indexed By Thread: [Previous] [Next]

Subject: Re: strange port usage (ports 665 and 666?)
From: bret @ real . com (Bret McDanel)
Date: Thu, 26 Jan 1995 10:54:38 -0500
To: firewalls @ greatcircle . com

In the previous message Darren Bolding said:
> In the previous message, Christopher Klaus said:
> > 
> > > 
> > >  I've been having a huge chunk of activty going to ports 665 and 666
> > > on my firewall.  Anyone have a clue what it might be?
> > 
> > The devil is messing with your firewall.  It may actually be an RPC service
> > which gets random ports, therefore those numbers change and could be 
> > any of the rpc services.
> > 
> 
> Within the last few months, the fellows who released Doom requested,
> and as I understand it, received, port 666 as a well known port.
> 
> I assume that 665 is similarly related.  So it looks like someone is
> trying to play doom with a friend.
> 
> Before anyone asks, I don't know of a doom proxy.  :) 
> 
There is a program called flash that connects to port 666 as well as the 
talkd port..  It sends an escape sequence as a username, which causes a
vt100 terminal to display garbage..  You basically have to restart the session
after that..

This could be what it is....



Follow-Ups:
Indexed By Date Previous: Re: Firewall and cdrom
From: "Bill VanRemmen U. of Rochester (716)275-4825" <BILLY @ urhep . pas . rochester . edu>
Next: Re: Router filtering not enough! (Was: Re: CERT advisory )
From: Jon Peatfield <J . S . Peatfield @ damtp . cambridge . ac . uk>
Indexed By Thread Previous: Re: strange port usage (ports 665 and 666?)
From: Darren Bolding <darren @ sccsi . com>
Next: Re: strange port usage (ports 665 and 666?)
From: sdw @ lig . net (Stephen D. Williams)

Google
 
Search Internet Search www.greatcircle.com