PDA

Click to See Complete Forum and Search --> : Port usage


Zair the Wise
September 16th, 2001, 10:55 PM
My firewall reports a lot of programs using ports 67-68 to connect to what seems to be my DNS server, are they used by any specific Windows application, and if so, which? If it is not used by any specific application, could anyone please explain me the high activity on those ports?

Negative
September 16th, 2001, 11:20 PM
Maybe this (http://www.antionline.com/showthread.php?s=&threadid=108083) will help.

KapperDog
September 16th, 2001, 11:53 PM
Zair,

Look here (http://www.robertgraham.com/pubs/firewall-seen.html#1.1) for common incoming probes against your firewall.

Paragraph 1.1, referring to ports 67 and 68 says, "Firewalls hooked to DSL and cable-modem lines see a ton of these sent to the broadcast address..."

Hope this helps.

KapperDog

Zair the Wise
September 17th, 2001, 01:40 AM
Very educative... thanks both of you

PhirePhreak
September 21st, 2001, 08:39 AM
Zair-- I like the signature.

Hope the info you recieved on the ports helped.

Later