[Dshield] FW: Port 65535

Mark Himsley markh at clockworkweb.com
Wed Mar 28 15:51:29 GMT 2001


-------- Original Message --------
On Wed, 28 Mar 2001 10:44:38 +0200 "Graham K. Dodd" <g.dodd at falk-ross.com>
wrote:

>Good Morning,
>		I sent a copy of this to the moderated list as well, apologies if you get two copies.
>
>Is anyone else seeing attempts on Port 65535 and what's the danger

I'd check what protocol it is, for instance, I was blocking some IPSEC
stuff on protocol 50 and it all appears to be for port 65535. Ports do not
have a meaning for all protocols.




>thanks,
>	Graham
>
>-----Original Message-----
>From:	Graham K. Dodd [SMTP:g.dodd at falk-ross.de]
>Sent:	Mittwoch, 28. März 2001 09:12
>To:	'dshieldmod at dshield.org'
>Subject:	Port 65535
>
>Good Morning to all,
>			can somebody explain the significance / threat to port 65535. I have noticed in the last 2 days one IP address keeps hitting port 65535 of the firewall.
>
>Appreciate any help or guidance.
>
>
>thanks,
>	Graham
>
>----------------------
>Graham K. Dodd
>Prokurist / Director of Operations
>Falk & Ross GmbH
>06301-35171130
>
>
>_______________________________________________
>Dshield mailing list
>Dshield at dshield.org
>To change your subscription options (or unsubscribe), see: http://www1.dshield.org/mailman/listinfo/dshield

--
Mark Himsley.
Technical Director
Clockwork Web.
+44 20 7471 0770
http://www.clockworkweb.com




More information about the list mailing list