Re: [newbie] Shorewall - OK to accept ICMP type 8 from all?

[Raffaele Belardi]

According to google, port 17300 might be used by the W32.Weird (Kuang2) 
to scan for infected machines. That does not mean your machine is 
infected (it's a Windows trojan), but that others are searching for an 
infected machine to activate the trojan.

http://www.freelists.org/archives/techies-discuss/06-2003/msg00000.html

http://us.mcafee.com/virusInfo/default.asp?id=description&virus_k=10213

Just to name two.

raffaele

[EMAIL PROTECTED] wrote:
On Thu, 04 Dec 2003 01:01, Raffaele Belardi wrote:
Thanks Raffaele.  Just checked the fwlog this morning after changing 
shorewall to allow pings last night and only being connected to the 
internet for one hour - and holy shite! MANY more hits than usual on ports 
80 and 17300.  Strange that so many hits on port 17300 all from different 
source IPs when I don't even know what that port is used for??? Its not 
listed in /etc/services and I haven't made any rules for that port myself.



Want to buy your Pack or Services from MandrakeSoft? 
Go to http://www.mandrakestore.com