🚀 go-pugleaf

RetroBBS NetNews Server

Inspired by RockSolid Light RIP Retro Guy

Article View: demon.security
Article #122

Re: Demon SMTP probes

#122
From: Peter Sumner
Date: Sun, 02 Apr 2000 00:00
33 lines
1814 bytes
On Sat, 1 Apr 2000 18:14:24 +0100, "Mark Hughes" <mark@compware.co.uk>
wrote:

>I've recently installed a nifty personal firewall and it is showing me
>that demon is looking for a service on port 25 (SMTP). Two machines
>probe my machine periodically while I am dialed in, and curiously they
>probe from apparently random source ports. See below for some sample
>probes....
>
>194.217.242.6 (punt-21 mail.demon.net) port 59652 to port 25
>194.217.242.34 (punt-11 mail.demon.net) port 44003 to port 25
>194.217.242.6 (punt-21 mail.demon.net) port 61112 to port 25
>194.217.242.34 (punt-11 mail.demon.net) port 45586 to port 25
>194.217.242.6 (punt-21 mail.demon.net) port 62413 to port 25
>194.217.242.34 (punt-11 mail.demon.net) port 47000 to port 25
>
>
>I don't wish demon to probe my machine for TCP/IP services.
>
>Can someone explain why demon appears to be probing my machine when I
>dial in?
>
>Is it part of the service agreement that they are able to do this?
>
>Please copy replies to mark@agilic.com
>
>Thanks
>
>Mark
Duhhhh this is an April Fool right?

-- 
Peter Sumner
Technical Details
Message-ID: <hqsees0ua765lj2l7rotbo0nvccs4vhd3a@4ax.com>
Path: arc1-ca.pugleaf.net!unknown!not-for-mail
References: <954609562.14748.0.nnrp-13.9e98ed62@news.demon.co.uk>

Show Full Headers
Complete Article Headers
X-Google-Language: ENGLISH,ASCII-7-bit
X-Google-Thread: 1065b6,fefb3eeb89e1f549
X-Google-Attributes: gid1065b6,public
From: Peter Sumner <peter@sumnerp.demon.co.uk>
Subject: Re: Demon SMTP probes
Date: 2000/04/02
Message-ID: <hqsees0ua765lj2l7rotbo0nvccs4vhd3a@4ax.com>
X-Deja-AN: 605703755
Content-Transfer-Encoding: 7bit
X-NNTP-Posting-Host: sumnerp.demon.co.uk:158.152.103.97
References: <954609562.14748.0.nnrp-13.9e98ed62@news.demon.co.uk>
To: demon.security
Content-Type: text/plain; charset=us-ascii
X-Complaints-To: abuse@demon.net
X-Trace: news.demon.co.uk 954696607 nnrp-14:24554 NO-IDENT sumnerp.demon.co.uk:158.152.103.97
MIME-Version: 1.0
Newsgroups: demon.security