Text 8404, 44 rader
Skriven 2005-06-05 08:08:04 av Jeff Guerdat (1:106/2000.0)
     Kommentar till en text av George Vandervort
Ärende: DoS.
============
On 06-04-05, George Vandervort said to Jeff Guerdat:

GV>> Anytime that you Access the Internet, you open certain Ports
GV>> while using a Browser, Instant Messenger, Desktop Weather,
GV>> Using an FTP util to Download or Upload files,  and Pop-ups..
JG>
JG> The ports are only opened based on outgoing connections.  In other
JG> words, you have to initiate the connection for the port to be utilized
JG> and then, since the remote point is identified in the outgoing
JG> traffic, only that address has access to use that port.  It's not the
JG> same thing as opening a port on the router so you can run a server.
JG>
JG> That said, someone who has sufficient access to the Internet or ISP
JG> backbone could detect the usage and take it over.  This would be
JG> difficult to do for most folks since 1) they'd need physical access to
JG> an appropriate part of the network and 2) they'd need the tools to do
JG> so.


GV>Not So Fast...

GV>If you have a Instant messenger ON-LINE waiting for a message,
GV>or your reading News Groups, on ON-Line in a chat room..

GV>Anybody with a Port Scanner that programs the scanner to
GV>look for OPEN Ports on the Internet IP Block by  Block and record
GV>which Ports are Open by Address, they can even limit the
GV>Port Scan to certain Ports known to be used by IM, Brousers and
GV>IIRC Chat rooms..

GV>Then they know who to target..

True enough.  But it's still BECAUSE you opened the port and now it's just
listening for contact.  Someone can, of course, surreptitiously take over the
open connection with the right software.  One of the dangers of leaving a port
open, whether by opening it on a firewall or using an application that simply
leaves the port open.


___
*Durango b211 * DurangoMail for Windows NT/9x

--- Maximus/2 3.01
 * Origin: COMM Port OS/2 juge.com 204.89.247.1 (281) 980-9671 (1:106/2000)