Tim Mcmanus wrote:
>
> Joshua,
>
> Our network have been scanned for devices on port
> 3128 as well. You are correct about the potential
> for proxy-relay, in fact I believe that port 3128
> is the default port for squid (a *nix proxy). I
> cannot confirm that a majority of the scans
> originate from China, however since we do not run
> squid we drop those packets anyway.
Remember that when you use a proxy, the ip address
seen by the web server is that of the proxy, not
the computer itself. Thus, one obvious reason that
someone in China need to use a proxy is if they're
trying to get the non-exportable version of something
such as the Windows NT 128 bit service packs or the
the 128 bit Netscape since they restrict downloads
of the more secure versions to U.S. ip addresses.
Eric Johnson
-
[To unsubscribe, send mail to [EMAIL PROTECTED] with
"unsubscribe firewalls" in the body of the message.]
