Re: port 666 from router

Glen Dady <[email protected]> Thu, 18 Nov 2004 10:56:51 -0500
Newsgroups gmane.comp.security.firewalls.smoothwall.general
Message-ID <[email protected]>
[email protected] wrote:

>Or Satan.
>
>Lance Spence
>Network Support Specialist
>Cox Communications - Hampton Roads
>(757) 222-8539 Work
>(757) 222-8516 Fax
>MCP
>
>-----Original Message-----
>From: [email protected]
>[mailto:[email protected]] On Behalf Of Martin Pot
>Sent: Wednesday, November 17, 2004 11:40 PM
>To: [email protected]
>Subject: Re: [gpl] port 666 from router
>
>On Wed, 17 Nov 2004 sendhere-tUwO18uD7CBWk0Htik3J/[email protected] wrote:
>
>  
>
>>hello . port 666 is being used on my routers. they r showin in the
>>    
>>
>firewall log commin from SW it self. then commin rite back in to port
>1026... anyboyd have a idea why this is ... never seen this b4...
>??????????????? ty
>
>It sounds like a PC on your green network may be infected with a trojan.
>See http://www.google.com/search?q=tcp+port+666 for more info.
>
>Cheers,
>Martin.
>http://martybugs.net
>_______________________________________________
>gpl mailing list
>[email protected]
>http://lists.smoothwall.org/mailman/listinfo/gpl
>
>SmoothWall Stash - Buy Our Stuff! http://cafepress.com/smoothwall
>_______________________________________________
>gpl mailing list
>[email protected]
>http://lists.smoothwall.org/mailman/listinfo/gpl
>
>SmoothWall Stash - Buy Our Stuff! http://cafepress.com/smoothwall
>
>  
>
It is probably a good idea for everyone to block port 666.  To the best 
of my knowledge it's not used by any legitimate service.  Also it would 
be a good thing to add to the next update file.

- Glen Dady
_______________________________________________
gpl mailing list
[email protected]
http://lists.smoothwall.org/mailman/listinfo/gpl

SmoothWall Stash - Buy Our Stuff! http://cafepress.com/smoothwall