Yeah, that's what I said.

Here's yours:
> When a connection is "actively" refused, it means
> that a machine received the request, but no one was listening.

Here's mine:
> Actively refused means nobody is listening on that port.

Tell me how those differ?

The OP's point was that he would expect a time out if it were a firewall.
That expectation was wrong because that's not how firewalls work.

My point was that if a client tries to connect to port X on a server and the
server receives the connection but doesn't do anything with it causing the
client to time out, that would indicate that port was able to be connected
to because it wasn't actively refused. That would expose *some* information
to the "bad guys" that there's somebody back there on that port (unless the
firewall exposed that behavior on ALL ports, even ones that don't currently
have listeners, which they don't).

-----Original Message-----
From: Discussion of advanced .NET topics.
[mailto:[EMAIL PROTECTED] On Behalf Of Steve Johnson
Sent: Wednesday, June 20, 2007 4:31 PM
To: ADVANCED-DOTNET@DISCUSS.DEVELOP.COM
Subject: Re: [ADVANCED-DOTNET] Vista Remoting Problem

On 6/20/07, Adam Sills <[EMAIL PROTECTED]> wrote:
>
> A time out would indicate that *someone* was listening on that port but
> refused to establish the connection and response, which would expose data
> to
> the bad guys (they'd know something was back there). Actively refused
> means
> nobody is listening on that port.



No, that's backwards.  When a connection is "actively" refused, it means
that a machine received the request, but no one was listening.  In my
experience with sockets (extensive, actually), this is the way it works.
Try closing the RDP(3389?) port using the firewall on a machine and then try
connecting to it via Remote Desktop.  You'll see that the request will time
out.

The error message being returned by remoting (with which I have very little
experience) in this case is simply MS's (poor, IMO) choice of words for the
socket error.

--
Steve Johnson

===================================
This list is hosted by DevelopMentorR  http://www.develop.com

View archives and manage your subscription(s) at http://discuss.develop.com

===================================
This list is hosted by DevelopMentorĀ®  http://www.develop.com

View archives and manage your subscription(s) at http://discuss.develop.com

Reply via email to