Re: musirc4.71.exe - firewall question

2003-10-04 Thread Jason Lim
> Anyway, I blocked it from connecting and I am trying to delete the file. I succeded and even put it in quarentine - but it keeps recreating itself. > > How can I get rid of it - or find the source that is recreating it? This is HIGHLY offtopic to this group, but anyway... Sounds like a virus.

musirc4.71.exe - firewall question

2003-10-04 Thread Elad Hemar
Hello all,   My personal firewall gives me a message that musirc4.71 is trying to create a listen port through 6667.  It is attempting every 2 minutes...   I believe it is an IRC port.   I searched in google and couldn't find anything about musirc4.71.exe.   I think it is an irc backdoor.   Does a

firewall question...

2001-06-07 Thread Peter Billson
Hello all, Can anyone tell me if there is a good reason to allow connections to a local DNS port(53) from remote privledges ports(< 1024)? As I understand it *all* DNS is one of: local port remote port (53)<-> (53) (1024:65535) -> (53) (53) <- (1024:65535)

firewall question...

2001-06-07 Thread Bulent Murtezaoglu
PB> Hello all, Can anyone tell me if there is a good reason to PB> allow connections to a local DNS port(53) from remote PB> privledges ports(< 1024)? Yes. Windows and possibly some other systems (little internet devices maybe) do not have this "privileged port" notion. Why do yo

Re: firewall question...

2001-06-07 Thread Peter Billson
Bulent Murtezaoglu wrote: > > PB> Hello all, Can anyone tell me if there is a good reason to > PB> allow connections to a local DNS port(53) from remote > PB> privledges ports(< 1024)? > > Yes. Windows and possibly some other systems (little internet > devices maybe) do not have this

Re: firewall question...

2001-06-07 Thread Bulent Murtezaoglu
> "PB" == Peter Billson <[EMAIL PROTECTED]> writes: [...] PB> Paranoia. Generally accepted practice when setting up a PB> firewall is to be as restrictive as possible without breaking PB> things, that includes restricting the originating ports. I don't see what you can gain by th

Re: firewall question...

2001-06-07 Thread Peter Billson
Thank you for helping me understand this more clearly. I like being able to identify *why* all traffic is occuring and your explinations helped me do that... and you are of course correct. Also, just for the archives, I can add one more reason to allow it: Cicso port forwarding firewalls. Pet

Re: firewall question...

2001-06-07 Thread Peter Billson
Thank you for helping me understand this more clearly. I like being able to identify *why* all traffic is occuring and your explinations helped me do that... and you are of course correct. Also, just for the archives, I can add one more reason to allow it: Cicso port forwarding firewalls. Pete

Re: firewall question...

2001-06-07 Thread Bulent Murtezaoglu
> "PB" == Peter Billson <[EMAIL PROTECTED]> writes: [...] PB> Paranoia. Generally accepted practice when setting up a PB> firewall is to be as restrictive as possible without breaking PB> things, that includes restricting the originating ports. I don't see what you can gain by t

Re: firewall question...

2001-06-06 Thread Peter Billson
Bulent Murtezaoglu wrote: > > PB> Hello all, Can anyone tell me if there is a good reason to > PB> allow connections to a local DNS port(53) from remote > PB> privledges ports(< 1024)? > > Yes. Windows and possibly some other systems (little internet > devices maybe) do not have thi

firewall question...

2001-06-06 Thread Bulent Murtezaoglu
PB> Hello all, Can anyone tell me if there is a good reason to PB> allow connections to a local DNS port(53) from remote PB> privledges ports(< 1024)? Yes. Windows and possibly some other systems (little internet devices maybe) do not have this "privileged port" notion. Why do y

firewall question...

2001-06-06 Thread Peter Billson
Hello all, Can anyone tell me if there is a good reason to allow connections to a local DNS port(53) from remote privledges ports(< 1024)? As I understand it *all* DNS is one of: local port remote port (53)<-> (53) (1024:65535) -> (53) (53) <- (1024:65535