Re: [Freenet-dev] Gaping hole in FProxy: fix or wait.

[Travis Bemann]

On Tue, Dec 26, 2000 at 12:53:49PM -0600, Brandon wrote:
> 
> > I'm no expert on TCP/IP connections and such, but even if FProxy rejects
> > all non-localhost connections, can the attacker still find out that
> > there's something running on port 8080, and then portscan for the node?
> 
> Port 8080 is a normal port to run a web server on. So running FProxy on
> port 8080 is not very suspicious.

Make that: It is a normal port to run an *unprivileged* web server on
a Unix/Linux machine on.

-- 
Travis Bemann
Sendmail is still screwed up on my box.
My email address is really [EMAIL PROTECTED]

PGP signature