Home page logo

nanog logo nanog mailing list archives

Re: Slow and Fast IP addresses on http ?
From: "Steven M. Bellovin" <smb () research att com>
Date: Tue, 17 Jun 2003 12:39:15 -0400

In message <20030616210129.GM751 () reifa-wave karrenberg net>, Daniel Karrenberg 


Check DNS of the client address affected, forward and reverse.

It might also be port 113 -- some sites try to query your tcp port 113, 
and wait for a timeout if the port is firewalled.  A better solution 
than blocking it is to send an immediate RST.

                --Steve Bellovin, http://www.research.att.com/~smb (me)
                http://www.wilyhacker.com (2nd edition of "Firewalls" book)

  By Date           By Thread  

Current thread:
[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]