Great Circle Associates Firewalls
(November 1996)
 

Indexed By Date: [Previous] [Next] Indexed By Thread: [Previous] [Next]

Subject: RE:Incoming TCP Packet with Port 80 ??
From: Dave Horsfall <dave @ fgh . oz . au>
Date: Tue, 19 Nov 1996 10:31:39 +1100 (EST)
To: Firewalls List <firewalls @ greatcircle . com>
In-reply-to: <199611181632 . AA09566 @ interlock . mgh . com>

On Mon, 18 Nov 1996 arager @
 mcgraw-hill .
 com wrote:

>      I am also seeing some WWW sites that seem to want to connect back to 
>      my WWW clients in a similar manner.....seems to initiate from the 
>      server on port 80 and back to the firewall on the firewalls client 
>      port......

[ snip ]

>      microsoft.com

I was wondering why our Cisco started logging these attempts, just after
we put a few Windoze boxes in with MSE...

I let nothing in - not even email, which arrives by another route - unless
it's "established".  I also see a few attempts to tickle our Samba ports
from time to time - most likely the same sort of thing.

-- 
Dave Horsfall VK2KFU  dave @
 fgh .
 oz .
 au  Ph: +61 2 9957-4224  Fx: +61 2 9922-5286
FGH Decision Support Systems P/L, 77 Pacific Hwy, Nth. Sydney, 2060, Australia



Follow-Ups:
References:
Indexed By Date Previous: Re: name "Firewall"
From: Steven Bellovin <smb @ research . att . com>
Next: Re: ActiveX and RISKS
From: Benedikt Stockebrand <benedikt @ devnull . ruhr . de>
Indexed By Thread Previous: RE:Incoming TCP Packet with Port 80 ??
From: arager @ mcgraw-hill . com
Next: RE:Incoming TCP Packet with Port 80 ??
From: "*-=[ obelicks ]=-*" <saliman @ sunsite . upm . edu . my>

Google
 
Search Internet Search www.greatcircle.com