RE: Remote Connections and port identification

[libero () aucegypt edu]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

What I recommends is that you google for a good TCP/IP tutorials. And if you
got some cash, get this book, TCP/IP Illustrated. And you will find out lots
of good answers to your questions.


./Ghaith
===============

Today is the tomorrow you worried about yesterday





- -----Original Message-----
From: Sayo Venchetti [mailto:november_echone () yahoo com] 
Sent: Tuesday, July 22, 2003 8:14 PM
To: security-basics () securityfocus com
Subject: Remote Connections and port identification



Hey again :),



I also was wondering what exactly a UDP, ACK, and RCP ports are. I'm 

guesing an ACK port has something to do with uploading information(?), 

and is it possible for a remote screen to launch an uplink or direct 

connection to another computer or network via an open TCP, UDP, ACK, or 

RCP port on a computer? If so, do they have to be already established, or 

can one open them from the remote computer? 



Also, I was reading a chart on remote SSH connections for a website on 

Koji Nobumoto's email of SSH, and it was sharing information on remote 

logins to windows machines from linux machines 

(http://www.uk.research.att.com/vnc/sshvnc.html) and it says at one point 

a linux machine 1 was forwarding information back over a public network 

through a secure remote network (Passing through another linux box #2) to 

another windows machine. 



Was the information being transfered going THROUGH the linux box 2, or 

was it directly connected to the windows box via some sort of secured 

connection? It raises the possibility of bypassing security on the 2nd 

linux box to direct connect to the windows box. If this was true, I'm 

thinking about performing an experiment where from my own windows 

machine, I will direct connect to a relativly unsecure LAN network down 

the street from my house (A friend of mine's computer network), and 

connect to a windows 2k pro OS box I own, bypassing his server computer. 

Is this possible? If so, I'll do it and report the results back here :P 



Thanks, 

~Sayo Venchetti


-
---------------------------------------------------------------------------
-
----------------------------------------------------------------------------

-----BEGIN PGP SIGNATURE-----
Version: PGPfreeware 6.5.3 for non-commercial use <http://www.pgp.com>

iQA/AwUBPyGTkaRW4RQby1QuEQLf+wCg3E8x37KKQMARB8x4g+NHGrt7ViYAoM3n
6IJvzI7Ub9+OLXkBPfzpWBSk
=9tAx
-----END PGP SIGNATURE-----


---------------------------------------------------------------------------
----------------------------------------------------------------------------