🚀 go-pugleaf

RetroBBS NetNews Server

Inspired by RockSolid Light RIP Retro Guy

Article View: comp.security.firewalls
Article #100

Re: Cuervo, I disagree: ShareSniffer Released

#100
From: Rebeccah Prastein
Date: Mon, 26 Feb 2001 09:14
47 lines
3306 bytes
In article <mAmm6.4120$S25.62449@typhoon.sonic.net>, 
spamfilter@navasgrp.dublin.ca.us says...
> [POSTED TO comp.dcom.modems.cable; PLEASE REPLY THERE]
> 
> In <97cngt$mop$2@news.panix.com>, snorwood@redballoon.net (Scott
> Norwood) wrote:
> 
> >
> >In article <t5nj9t4vvua0ovclofd9fcidjgfqmjnk2m@4ax.com>,
> > <rtoledo.you.must.remove.this.to.reply@bigfoot.com> wrote:
> >>
> >>If I scan your port 21, HOW am I trying to connect to it? and I know
> >>you know it takes more than that it takes a tcp 21/20 connection where
> >>a user name and a password has to be exchanged before that connection
> >>happens,  or is it a trojan going outbound? but then that's internal?
> >>UDP 21? please enlightens us
> >
> >Huh?
> >
> >Either you don't understand how FTP works or you're being intentionally
> >argumentative.
> 
> Probably both.  <g>
> 
> >The "connection" has nothing to do with the exchange of a
> >username/password pair.  I can "connect" to your FTP server just
> >by typing "telnet somehost 21" (or by using any other utility that
> >creates TCP connections...netcat, etc.).  The username/password
> >pair cannot be exchanged until the connection exist.  The fact that
> >an FTP server is basically useless until the username/password
> >pair has been exchange is irrelevant to the question of when the
> >actual connection has been established.
> 
> Correct.
> 
> 


But making that TCP connection is NOT analogous to entering a 
building.  It is analogous to turning a doorknob.  You apply the force 
to the knob (SYN).  The knob responds by turning (SYN-ACK).  You can 
then push on the door to enter, or maybe you need a key (password).

With UDP there is no knob on the door for you to turn.  You just push 
to enter.

Rebeccah
Technical Details
Message-ID: <MPG.1503be36f44f72a3989701@news.earthlink.net>
Path: arc1-ca.pugleaf.net!supernews.google.com!sn-xit-03!supernews.com!nntp.cs.ubc.ca!newsfeed.direct.ca!look.ca!newsfeed1.earthlink.net!newsfeed.earthlink.net!newsmaster1.prod.itd.earthlink.net!newsread2.prod.itd.earthlink.net.POSTED!not-for-mail
References: <3A966412.9336DCD8@mynetwatchman.com> <qvig9tobv9597b8fmhp5bohg701i8ftbtk@4ax.com> <qO9m6.4024$S25.60081@typhoon.sonic.net> <t5nj9t4vvua0ovclofd9fcidjgfqmjnk2m@4ax.com> <97cngt$mop$2@news.panix.com> <mAmm6.4120$S25.62449@typhoon.sonic.net>

Show Full Headers
Complete Article Headers
X-Google-Language: ENGLISH,ASCII-7-bit
X-Google-Thread: f922c,b3c453f70036b961
X-Google-Attributes: gidf922c,public
X-Google-Thread: 10090f,b3c453f70036b961
X-Google-Attributes: gid10090f,public
X-Google-Thread: f5dc1,b3c453f70036b961
X-Google-Attributes: gidf5dc1,public
X-Google-Thread: 113850,b3c453f70036b961
X-Google-Attributes: gid113850,public
X-Google-ArrivalTime: 2001-02-26 01:16:05 PST
Path: arc1-ca.pugleaf.net!supernews.google.com!sn-xit-03!supernews.com!nntp.cs.ubc.ca!newsfeed.direct.ca!look.ca!newsfeed1.earthlink.net!newsfeed.earthlink.net!newsmaster1.prod.itd.earthlink.net!newsread2.prod.itd.earthlink.net.POSTED!not-for-mail
From: Rebeccah Prastein <rhp@fgi.net>
Newsgroups: comp.security.firewalls,bellsouth.net.security,comp.dcom.xdsl,comp.dcom.modems.cable
Subject: Re: Cuervo, I disagree: ShareSniffer Released
Message-ID: <MPG.1503be36f44f72a3989701@news.earthlink.net>
References: <3A966412.9336DCD8@mynetwatchman.com> <qvig9tobv9597b8fmhp5bohg701i8ftbtk@4ax.com> <qO9m6.4024$S25.60081@typhoon.sonic.net> <t5nj9t4vvua0ovclofd9fcidjgfqmjnk2m@4ax.com> <97cngt$mop$2@news.panix.com> <mAmm6.4120$S25.62449@typhoon.sonic.net>
X-Newsreader: MicroPlanet Gravity v2.20
Lines: 48
Date: Mon, 26 Feb 2001 09:14:09 GMT
NNTP-Posting-Host: 158.252.220.162
X-Complaints-To: abuse@earthlink.net
X-Trace: newsread2.prod.itd.earthlink.net 983178849 158.252.220.162 (Mon, 26 Feb 2001 01:14:09 PST)
NNTP-Posting-Date: Mon, 26 Feb 2001 01:14:09 PST
Organization: EarthLink Inc. -- http://www.EarthLink.net