Article View: comp.security.firewalls
Article #100Re: Cuervo, I disagree: ShareSniffer Released
From: Rebeccah Prastein
Date: Mon, 26 Feb 2001 09:14
Date: Mon, 26 Feb 2001 09:14
47 lines
3306 bytes
3306 bytes
In article <mAmm6.4120$S25.62449@typhoon.sonic.net>, spamfilter@navasgrp.dublin.ca.us says... > [POSTED TO comp.dcom.modems.cable; PLEASE REPLY THERE] > > In <97cngt$mop$2@news.panix.com>, snorwood@redballoon.net (Scott > Norwood) wrote: > > > > >In article <t5nj9t4vvua0ovclofd9fcidjgfqmjnk2m@4ax.com>, > > <rtoledo.you.must.remove.this.to.reply@bigfoot.com> wrote: > >> > >>If I scan your port 21, HOW am I trying to connect to it? and I know > >>you know it takes more than that it takes a tcp 21/20 connection where > >>a user name and a password has to be exchanged before that connection > >>happens, or is it a trojan going outbound? but then that's internal? > >>UDP 21? please enlightens us > > > >Huh? > > > >Either you don't understand how FTP works or you're being intentionally > >argumentative. > > Probably both. <g> > > >The "connection" has nothing to do with the exchange of a > >username/password pair. I can "connect" to your FTP server just > >by typing "telnet somehost 21" (or by using any other utility that > >creates TCP connections...netcat, etc.). The username/password > >pair cannot be exchanged until the connection exist. The fact that > >an FTP server is basically useless until the username/password > >pair has been exchange is irrelevant to the question of when the > >actual connection has been established. > > Correct. > > But making that TCP connection is NOT analogous to entering a building. It is analogous to turning a doorknob. You apply the force to the knob (SYN). The knob responds by turning (SYN-ACK). You can then push on the door to enter, or maybe you need a key (password). With UDP there is no knob on the door for you to turn. You just push to enter. Rebeccah
Technical Details
Message-ID:
<MPG.1503be36f44f72a3989701@news.earthlink.net>Path:
arc1-ca.pugleaf.net!supernews.google.com!sn-xit-03!supernews.com!nntp.cs.ubc.ca!newsfeed.direct.ca!look.ca!newsfeed1.earthlink.net!newsfeed.earthlink.net!newsmaster1.prod.itd.earthlink.net!newsread2.prod.itd.earthlink.net.POSTED!not-for-mailReferences:
<3A966412.9336DCD8@mynetwatchman.com> <qvig9tobv9597b8fmhp5bohg701i8ftbtk@4ax.com> <qO9m6.4024$S25.60081@typhoon.sonic.net> <t5nj9t4vvua0ovclofd9fcidjgfqmjnk2m@4ax.com> <97cngt$mop$2@news.panix.com> <mAmm6.4120$S25.62449@typhoon.sonic.net>Show Full Headers
Complete Article Headers
X-Google-Language: ENGLISH,ASCII-7-bit X-Google-Thread: f922c,b3c453f70036b961 X-Google-Attributes: gidf922c,public X-Google-Thread: 10090f,b3c453f70036b961 X-Google-Attributes: gid10090f,public X-Google-Thread: f5dc1,b3c453f70036b961 X-Google-Attributes: gidf5dc1,public X-Google-Thread: 113850,b3c453f70036b961 X-Google-Attributes: gid113850,public X-Google-ArrivalTime: 2001-02-26 01:16:05 PST Path: arc1-ca.pugleaf.net!supernews.google.com!sn-xit-03!supernews.com!nntp.cs.ubc.ca!newsfeed.direct.ca!look.ca!newsfeed1.earthlink.net!newsfeed.earthlink.net!newsmaster1.prod.itd.earthlink.net!newsread2.prod.itd.earthlink.net.POSTED!not-for-mail From: Rebeccah Prastein <rhp@fgi.net> Newsgroups: comp.security.firewalls,bellsouth.net.security,comp.dcom.xdsl,comp.dcom.modems.cable Subject: Re: Cuervo, I disagree: ShareSniffer Released Message-ID: <MPG.1503be36f44f72a3989701@news.earthlink.net> References: <3A966412.9336DCD8@mynetwatchman.com> <qvig9tobv9597b8fmhp5bohg701i8ftbtk@4ax.com> <qO9m6.4024$S25.60081@typhoon.sonic.net> <t5nj9t4vvua0ovclofd9fcidjgfqmjnk2m@4ax.com> <97cngt$mop$2@news.panix.com> <mAmm6.4120$S25.62449@typhoon.sonic.net> X-Newsreader: MicroPlanet Gravity v2.20 Lines: 48 Date: Mon, 26 Feb 2001 09:14:09 GMT NNTP-Posting-Host: 158.252.220.162 X-Complaints-To: abuse@earthlink.net X-Trace: newsread2.prod.itd.earthlink.net 983178849 158.252.220.162 (Mon, 26 Feb 2001 01:14:09 PST) NNTP-Posting-Date: Mon, 26 Feb 2001 01:14:09 PST Organization: EarthLink Inc. -- http://www.EarthLink.net