[Dshield] Odd firewall entry: syn/ack from nameserver on irc port

Jeff Kell jeff-kell at utc.edu
Tue Aug 9 18:12:42 GMT 2005


TRushing at hollandco.com wrote:
> These two entries in my firewall were somewhat alarming because the 
> SYN/ACK would seem to imply that my machine was making an outbound 
> connection to an irc channel and to a website.

That's what a bot does.  

Jeff



More information about the list mailing list