> We may need to open a port or two for "home-grown" applications, e.g.
>tcp-1234, tcp-2345, on a Checkpoint Firewall-1 v4.0. Would it cause
>any security concerns? Any comments/suggestions are greatly
>appreciated. Thanks, Ivan.
TCP 1234 is used by a remote access trojan - Ultor. The server is called
T5port.exe and is 33.792 bytes large. It does not register and uses telnet
as the connecting client.
If you are talking about a "home-grown" app, try to use another port. If
you combine the knowledge of used trojan ports and already used ports in
the IANA list, you should avoid most problems.
Cheers,
Joakim
-
[To unsubscribe, send mail to [EMAIL PROTECTED] with
"unsubscribe firewalls" in the body of the message.]
