> On the "how do you test", I know mine is working because of all the > "Teergrubing" messages I receive in syslog. It is running on all low > ports <1024 so it catches alot of activity. I have not done it myself, > but maybe a different port scanning service could provide better results > for you. > > GRC is using some new form of scanning your ports, and it is supposed to > be very quick. And because LaBrea is running, it should show your ports > open when you run a scan from GRC...or at least thats what happen to me > going to that scanning site. Anybody else please jump in on this one .. > should our ports be showing open just because we are using LaBrea? That > never happened to me before using LaBrea (using the scanner at GRC) - they > all showed "stealth" status before.
Yes, a remote system will see your low ports as "open", but trying to communicate with these ports in any meaningful way will cause the remote system to get "stuck", tying up it's reasources (ie it's "tar-pitted"). The most fun way to test this is using a MS platform...bring up IE and point it at your firewall, on a port that LaBrea will respond to (ie http://<your-IP>:27/). IE will happily open the page, and sit *FOREVER* with the little world spinning, never giving up... Charles Steinkuehler http://lrp.steinkuehler.net http://c0wz.steinkuehler.net (lrp.c0wz.com mirror) _______________________________________________ Leaf-user mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/leaf-user
