celmir
firestarter me fait apparaitre un truc du genre
source 127.0.0.1
destination 127.0.0.1
port 59300
service inconnu
je suis en fc3 et je ne voit rien au travers de 'netstat -taupen' ou 'netstat -ntpl'
c'est peut-être rien enfin j'espère, une idée ?
celmir
Port number: 59300
Common name(s): client-port on Red Hat Linux 9.0, Fedora Core 1, Red Hat Enterprise 3
Common service(s): client
Service description(s): Outgoing client connections from systems.
Common server(s): RPC based services, Windows Messaging Service.
Common client(s): All client software (SSH, Web clients, etc.)
Common problem(s): Insecure client software
Encrypted options: Not applicable
Secure options: Not applicable
Firewalling recommendations: Block inbound connections to client ports, allow outgoing connections and returning packets (keep state)
Attack detection: As a general rule data coming in to client ports that is not part of an established connection is likely an attack. Exceptions exist of course, such as FTP, various instant messenger protocols, file sharing protocols, IRC's DCC, and so on.
ce serait pas mon client dhcp ? mais alors pourquoi je vois rien avec netstat ?
