Re: DNS update queries: another sort of suspicious activity.

[patrick () PINE NL (Patrick Oonk)]

On Fri, Jan 28, 2000 at 11:20:08PM +0300, Fyodor wrote:
> On Fri, 28 Jan 2000, Patrick Oonk wrote:
>
> ~ Fydor,
> ~ 
> ~ this seems to be a 'feature' of Windows 2000.
> ~ If you had portscanned the offending box you might
> ~ have seen it was a Win2k box. 
> ~ 
>
> Wow.. then it must be full of surprises. :) Notice that 192.168.0.4 is a
> non-routable IP address, so it could be someone's sick firewall which
> allowed the iternal network to send sick UDP datagrams out. 
 
I assumed the ip number to be an example :)

-- 
 Patrick Oonk - PO1-6BONE - patrick () pine nl - www.pine.nl/~patrick
 Pine Internet B.V.      PINE31337-RIPE        PGP key ID BE7497F1  
 Tel: +31-70-3111010 - Fax: +31-70-3111011 - http://www.pine.nl/
 ----    Pine Security Digest - http://security.nl/ (Dutch)   ----
 Excuse of the day: Your excuse is: failed trials, system needs
 redesigned


<HR NOSHADE>
<UL>
<LI>application/pgp-signature attachment: stored
</UL>