[olug] Cox blocking 80 and 81 now

[Trent Melcher]

I have done this,  I had originally just wrapped ssh, and even sent back a
WARNING with their IP with the wrap to let them know I logged them, but that
didnt stop them from trying, so I moved it to a high numbered port.

Tremt

=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-==-=-=-=-=-=-=-=-=-=
    Trent Melcher  (tmelcher at trilogytel.com)
            StarTouch International
         Network/System Administrator
            Phone:402.346.4600x103
=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-==-=-=-=-=-=-=-=-=-=

-----Original Message-----
From: David Walker [mailto:linux_user at grax.com]
Sent: Thursday, May 23, 2002 1:42 PM
To: olug at olug.org
Subject: Re: [olug] Cox blocking 80 and 81 now


I recommend switching ssh to a different port, preferably a 5 digit one.  If
you're the only one using it it doesn't take much to remember which port you
put in on and you'll make it harder for someone who is just scanning for
vulnerable ssh.  I detect a fair number of scans for ssh.

On Thursday 23 May 2002 01:12 pm, Mike Hostetler wrote:
> They had them open for longer than a week . . . must have been waiting for
> their network to settle down after the @home move to shut off port 80.
>
> But, the good news is that they haven't shut off port 22, so I can still
> ssh to my box.
>
> On Thu, May 23, 2002 at 11:59:52AM -0500, Jonathan Warren wrote:
> > It seems outbound port 80 and 81 no long work.  Requests get sent to the
> > web server but it never gets a response.  Interesting choice of ports.
> > Guess 81 was becoming too common for there liking?  Anyone know anything
> > about this?  I know they had them open for at least a week.  I also know
> > I was getting web browser hits from other cox customers.  Oh well.
> >
> > -Jon W
> >
> > -_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_
> >
> > For help contact olug-help at olug.org - run by ezmlm
> > to unsubscribe, send mail to olug-unsubscribe at olug.org
> > or `mail olug-unsubscribe at olug.org < /dev/null`
> > (c)1998-2002 OLUG http://www.olug.org
> >
> > -_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_


-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_

For help contact olug-help at olug.org - run by ezmlm
to unsubscribe, send mail to olug-unsubscribe at olug.org
or `mail olug-unsubscribe at olug.org < /dev/null`
(c)1998-2002 OLUG http://www.olug.org

-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_



-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_

For help contact olug-help at olug.org - run by ezmlm
to unsubscribe, send mail to olug-unsubscribe at olug.org
or `mail olug-unsubscribe at olug.org < /dev/null`
(c)1998-2002 OLUG http://www.olug.org

-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_