Re: high port scanning

[hermit1 <hermits () mac com>]

Two things to think about:
1.  Someone is scanning your network.  This is almost always a bad thing.
2.  They may be planning a BIND attack - lots of places haven't bothered to 
patch their BIND programs for the known problems.

hermit1

At 11:39 AM 1/17/01 +0800, sh lee wrote:
> I had noticed in our Intrusion detection software reported
> that (src)1.2.3.4:high port  ->   (des)4.3.2.1:53, a DNS
> high port scanning.
>
>
> Any concern ??
>
> Regards;
> Lee

_______________________________________________
firewall-wizards mailing list
firewall-wizards () nfr com
http://www.nfr.com/mailman/listinfo/firewall-wizards