Re: UDP Scan port 53(dns) -> dst port <1024

From: Clinton Smith (securityat_private)
Date: Sun Feb 24 2002 - 21:17:53 PST

Next message: Matt Zimmerman: "Re: Checking for rootkits"

Previous message: David Carmean: "Re: Virus/trojan tunnel out from behind firewall?"
In reply to: Robert Graham: "Re: UDP Scan port 53(dns) -> dst port <1024"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

To all who have helped - Thanks.

It appears that the issue is with a
badly configured DNS server.

Occams Razor has cut again!

Kind Regards,
Clinton

----------------------------------------------------------------------------
This list is provided by the SecurityFocus ARIS analyzer service.
For more information on this free incident handling, management 
and tracking system please see: http://aris.securityfocus.com

Next message: Matt Zimmerman: "Re: Checking for rootkits"
Previous message: David Carmean: "Re: Virus/trojan tunnel out from behind firewall?"
In reply to: Robert Graham: "Re: UDP Scan port 53(dns) -> dst port <1024"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

This archive was generated by hypermail 2b30 : Mon Feb 25 2002 - 14:29:24 PST