Re: Some unusual network features

From: Nathan R. Valentine (nathan@nathanvalentine.org)
Date: Tue Jan 13 2004 - 15:22:30 EST

• Next message: Andrew Simmons: "Re: Some unusual network features"
• Previous message: Travis Potter: "RE: potential fax server security issues?"
• In reply to: Paul Johnston: "Some unusual network features"
• Next in thread: Andrew Simmons: "Re: Some unusual network features"
• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]

> I've got some theories, but I'm not sure how much I'm jumping to
> conclusions.

My guesses:

1) A tarpit.
2) Hosts behind a firewall with some kind of Layer 7 inspecting proxy.
3) A firewall with a munged NAT configuration.
4) Some combination of the above.

Have you tried fingerprinting the IP stack? I wouldn't be surprised to
find a homebrew *nix security box or a Symantec box.

-- 
Nathan R. Valentine <nathan@nathanvalentine.org>

• application/pgp-signature attachment: This is a digitally signed message part

• Next message: Andrew Simmons: "Re: Some unusual network features"
• Previous message: Travis Potter: "RE: potential fax server security issues?"
• In reply to: Paul Johnston: "Some unusual network features"
• Next in thread: Andrew Simmons: "Re: Some unusual network features"
• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]

This archive was generated by hypermail 2.1.7 : Sat Apr 12 2008 - 10:53:45 EDT