[lug] looking up ip's

D. Stimits stimits at idcomm.com
Mon Sep 4 13:08:56 MDT 2000


"D. Stimits" wrote:
> 
> Lately I've been seeing some different ports being tested, usually RPC
> or IMAP related (which are firewalled, and any apps not used are "put on
> ice"). What I'm wondering about is that although it is possible to spoof
> ip's that don't require, I can turn around and do anonymous ftp back
> into that machine, or even get to the telnet prompt and see a linux
> machine.  However, although I can verify that the host really exists, I

I should rephrase...
...although it is possible to spoof an ip that doesn't require some kind
of handshake, I can turn around and do anonymous ftp back...

While that doesn't guarantee the original ip is the correct source, it
does show that the ip exists, and I'd like to keep track of this...




More information about the LUG mailing list