Re: Connections from 158.152.1.48/158.152.1.53

Article View: demon.ip.support.nt

Article #80

Back to demon.ip.support.nt Previous Next

#80

From: Richard Clayton
Date: Tue, 16 Jul 2002 22:03

23 lines
1818 bytes

In article <l409jucpmg7vfflb88i9930172dvhaoklg@4ax.com>, Richard
Tibbetts <richard@primepeace.ltd.uk> writes

>Should I be worried?  

yes, your firewall is either useless or you've configured it wrongly

>My firewall has suddenly started logging *lots*
>of attempted connections from the Demon DNS servers from port 53,
>trying to connect to a variety of 4nnn ports.  

I expect it is returning the details of names you have looked up

>This seems to be a new
>thing.

then it will be something you changed recently

-- 
richard                                              Richard Clayton

They that can give up essential liberty to obtain a little temporary
safety deserve neither liberty nor safety.         Benjamin Franklin

Technical Details

Message-ID: <0vGOdmCAhJN9EAgE@highwayman.com>

Path:

arc1-ca.pugleaf.net!archiver1.google.com!news1.google.com!sn-xit-02!sn-xit-06!sn-xit-08!supernews.com!priapus.visi.com!news-out.visi.com!hermes.visi.com!skynet.be!skynet.be!kibo.news.demon.net!news.demon.co.uk!demon!gti.noc.demon.net!highwayman.com!richard

References: <l409jucpmg7vfflb88i9930172dvhaoklg@4ax.com>

Show Full Headers

Complete Article Headers

X-Google-Language: ENGLISH,ASCII-7-bit
X-Google-Thread: 112d46,c716dabf41f2b438
X-Google-Attributes: gid112d46,public
X-Google-ArrivalTime: 2002-07-16 15:11:00 PST
Path: arc1-ca.pugleaf.net!archiver1.google.com!news1.google.com!sn-xit-02!sn-xit-06!sn-xit-08!supernews.com!priapus.visi.com!news-out.visi.com!hermes.visi.com!skynet.be!skynet.be!kibo.news.demon.net!news.demon.co.uk!demon!gti.noc.demon.net!highwayman.com!richard
From: Richard Clayton <richard@highwayman.com>
Newsgroups: demon.ip.support.nt
Subject: Re: Connections from 158.152.1.48/158.152.1.53
Date: Tue, 16 Jul 2002 23:03:44 +0100
Organization: Highwayman Associates Ltd
Message-ID: <0vGOdmCAhJN9EAgE@highwayman.com>
References: <l409jucpmg7vfflb88i9930172dvhaoklg@4ax.com>
NNTP-Posting-Host: gti.noc.demon.net
X-NNTP-Posting-Host: gti.noc.demon.net:195.11.55.101
X-Trace: news.demon.co.uk 1026857207 nnrp-13:21297 NO-IDENT gti.noc.demon.net:195.11.55.101
X-Complaints-To: abuse@demon.net
MIME-Version: 1.0
X-Newsreader: Turnpike Integrated Version 5.01 M <7fPN0OjtGdv6AX1irDkRphaT6+>
Lines: 23

Reply to Parent Message