I''m receiving an unusually high number of hits on UDP Port 12203 (that
I''m dropping thanks to Shorewall) that I have not experienced before.
Is there a new trojan/worm that used the port ?
Is anyone else experiencing the same ?
Is there a negative in adding the rule:
0.0.0.0/0 udp 1023
to the blacklist on the firewall ?
- Curious Bill
Bill.Light@kp.org wrote:> > I''m receiving an unusually high number of hits on UDP Port 12203 > (that I''m dropping thanks to Shorewall) that I have not experienced > before. > > Is there a new trojan/worm that used the port ? > Is anyone else experiencing the same ? > Is there a negative in adding the rule: > > 0.0.0.0/0 udp 1023 > > to the blacklist on the firewall ? > > - Curious BillSANS has it listed thus: http://isc.sans.org/port_details.php?port=12203 ------------------------------------------------------- All the advantages of Linux Managed Hosting--Without the Cost and Risk! Fully trained technicians. The highest number of Red Hat certifications in the hosting industry. Fanatical Support. Click to learn more http://sel.as-us.falkag.net/sel?cmd=lnk&kid=107521&bid=248729&dat=121642
> I''m receiving an unusually high number of hits on UDP Port 12203 > (that I''m dropping thanks to Shorewall) that I have not experienced > before. > > Is there a new trojan/worm that used the port ? > Is anyone else experiencing the same ? > Is there a negative in adding the rule: > > 0.0.0.0/0 udp 1023 > > to the blacklist on the firewall ? > > - Curious BillSANS has it listed thus: http://isc.sans.org/port_details.php?port=12203 ===================================================== I saw that, and that''s why I asked --- the count is way up for a couple of games that have been around since 2002 ?? Doesn''t make any sense...