Article View: demon.security
Article #122Re: Demon SMTP probes
From: Peter Sumner
Date: Sun, 02 Apr 2000 00:00
Date: Sun, 02 Apr 2000 00:00
33 lines
1814 bytes
1814 bytes
On Sat, 1 Apr 2000 18:14:24 +0100, "Mark Hughes" <mark@compware.co.uk> wrote: >I've recently installed a nifty personal firewall and it is showing me >that demon is looking for a service on port 25 (SMTP). Two machines >probe my machine periodically while I am dialed in, and curiously they >probe from apparently random source ports. See below for some sample >probes.... > >194.217.242.6 (punt-21 mail.demon.net) port 59652 to port 25 >194.217.242.34 (punt-11 mail.demon.net) port 44003 to port 25 >194.217.242.6 (punt-21 mail.demon.net) port 61112 to port 25 >194.217.242.34 (punt-11 mail.demon.net) port 45586 to port 25 >194.217.242.6 (punt-21 mail.demon.net) port 62413 to port 25 >194.217.242.34 (punt-11 mail.demon.net) port 47000 to port 25 > > >I don't wish demon to probe my machine for TCP/IP services. > >Can someone explain why demon appears to be probing my machine when I >dial in? > >Is it part of the service agreement that they are able to do this? > >Please copy replies to mark@agilic.com > >Thanks > >Mark Duhhhh this is an April Fool right? -- Peter Sumner
Technical Details
Message-ID:
<hqsees0ua765lj2l7rotbo0nvccs4vhd3a@4ax.com>Path:
arc1-ca.pugleaf.net!unknown!not-for-mailReferences:
<954609562.14748.0.nnrp-13.9e98ed62@news.demon.co.uk>Show Full Headers
Complete Article Headers
X-Google-Language: ENGLISH,ASCII-7-bit X-Google-Thread: 1065b6,fefb3eeb89e1f549 X-Google-Attributes: gid1065b6,public From: Peter Sumner <peter@sumnerp.demon.co.uk> Subject: Re: Demon SMTP probes Date: 2000/04/02 Message-ID: <hqsees0ua765lj2l7rotbo0nvccs4vhd3a@4ax.com> X-Deja-AN: 605703755 Content-Transfer-Encoding: 7bit X-NNTP-Posting-Host: sumnerp.demon.co.uk:158.152.103.97 References: <954609562.14748.0.nnrp-13.9e98ed62@news.demon.co.uk> To: demon.security Content-Type: text/plain; charset=us-ascii X-Complaints-To: abuse@demon.net X-Trace: news.demon.co.uk 954696607 nnrp-14:24554 NO-IDENT sumnerp.demon.co.uk:158.152.103.97 MIME-Version: 1.0 Newsgroups: demon.security