Re: [OT] Detecting "telnet"?

2010-06-11 Thread Mark Plowman
On Thu, 10 Jun 2010 23:31:49 +0200, Ralf Hildebrandt wrote: [...] > I must admit, it sounds feasible (timing between keystrokes etc.), With respect to detection, is this relevant? http://en.wikipedia.org/wiki/Telnet#Telnet_data -- If you have an apple and I have an apple and we exchange t

Re: [OT] Detecting "telnet"?

2010-06-11 Thread Bryan Irvine
I vaguely remember managing an email server around 1997 and there was a checkbox to disable telnet access. IIRC it was Imail on windows NT 4, but that was a long time ago. I do remember thinking it was odd that they could discriminate, but it seemed to work - though I'm not sure how or why. -B

Re: [OT] Detecting "telnet"?

2010-06-11 Thread Ralf Hildebrandt
* N. Yaakov Ziskind : > Kinda reminds me of the Donald Westlake story, which described a > fine-arts painter who took to counterfeiting $20s; the Secret Service > let him go with a slap on the wrist, they said, when they figured out > it him hours to produce each note. :-) Exactly my point. --

Re: [OT] Detecting "telnet"?

2010-06-11 Thread N. Yaakov Ziskind
Ralf Hildebrandt wrote (on Fri, Jun 11, 2010 at 09:57:42AM +0200): > > Administrators of sites that want to trouble-shoot connectivity issues > > with your server will use "telnet 25" from time to time. There is no > > need to block this, it is by far the least likely source of any > > significant

Re: [OT] Detecting "telnet"?

2010-06-11 Thread Ralf Hildebrandt
* Victor Duchovni : > > Anyway. Is there such a thing? Does anybody use such a thing? > > Why do you want to discriminate against "telnet 25"? What do i know? I don't do this nonsense :) 'm just asking > Administrators of sites that want to trouble-shoot connectivity issues > with your server w

Re: [OT] Detecting "telnet"?

2010-06-10 Thread Michael J Wise
On Jun 10, 2010, at 9:19 PM, Victor Duchovni wrote: > On Thu, Jun 10, 2010 at 11:31:49PM +0200, Ralf Hildebrandt wrote: > >> I heard that there are firewalls/security appliances that supposedly >> can distinguish "somebody using telnet" from "a machine speaking SMTP". >> >> I must admit, it soun

Re: [OT] Detecting "telnet"?

2010-06-10 Thread Victor Duchovni
On Thu, Jun 10, 2010 at 11:31:49PM +0200, Ralf Hildebrandt wrote: > I heard that there are firewalls/security appliances that supposedly > can distinguish "somebody using telnet" from "a machine speaking SMTP". > > I must admit, it sounds feasible (timing between keystrokes etc.), but > little us

Re: [OT] Detecting "telnet"?

2010-06-10 Thread Charles Seeger
+-- Ralf Hildebrandt wrote (Thu, 10-Jun-2010, 23:31 +0200): | | I heard that there are firewalls/security appliances that supposedly | can distinguish "somebody using telnet" from "a machine speaking SMTP". | | I must admit, it sounds feasible (timing between keystrokes etc.), but | little us

Re: [OT] Detecting "telnet"?

2010-06-10 Thread Reinaldo de Carvalho
On Thu, Jun 10, 2010 at 6:31 PM, Ralf Hildebrandt wrote: > I heard that there are firewalls/security appliances that supposedly > can distinguish "somebody using telnet" from "a machine speaking SMTP". > > I must admit, it sounds feasible (timing between keystrokes etc.), but > little useful. > W

[OT] Detecting "telnet"?

2010-06-10 Thread Ralf Hildebrandt
I heard that there are firewalls/security appliances that supposedly can distinguish "somebody using telnet" from "a machine speaking SMTP". I must admit, it sounds feasible (timing between keystrokes etc.), but little useful. Anyway. Is there such a thing? Does anybody use such a thing? -- Ra

Re: [OT] Detecting "telnet"?

2010-06-10 Thread Jerrale Gayle
On 6/10/2010 5:31 PM, Ralf Hildebrandt wrote: I heard that there are firewalls/security appliances that supposedly can distinguish "somebody using telnet" from "a machine speaking SMTP". I must admit, it sounds feasible (timing between keystrokes etc.), but little useful. Anyway. Is there such

Re: [OT] Detecting "telnet"?

2010-06-10 Thread Jeroen Geilman
On 06/10/2010 11:31 PM, Ralf Hildebrandt wrote: I heard that there are firewalls/security appliances that supposedly can distinguish "somebody using telnet" from "a machine speaking SMTP". I must admit, it sounds feasible (timing between keystrokes etc.), but little useful. Anyway. Is there suc