On Tue, Jan 08, 2002 at 06:49:55PM -0600, Michael Jinks wrote: > I'm not sure. The freshmeat guys (or whomever) might have just been > guessing based on contextual clues, like ident checks failing, or > ftp connections switching to "passive". Without knowing the context > it's hard to say for sure. >
The port number on the return address is different (for the particular service) than the actual service port ... that is how you can spot a Masq's connection. aloha, dave
