PDA

Click to See Complete Forum and Search --> : What do all these firewall hits mean

JKlebs9225
02-09-2005, 01:45 AM
Hello a.., I recently installed firestarter on Slackware linux 9.1, and I have never really had anything come up on it, maybe a few blocked things a day. Today, I have had about 20 blocked requests from 72.3.135.33 They are all of type sun-rpc portmapper. I was wondering what this meant. I am new to this firewall business, and I wanted to know what was blocked, and what that IP address is. Can anyone help me please :) Thanks
-Jason
canon006
02-09-2005, 02:26 AM
According to whois.arin.net that IP belongs to Rackspace.com, specificly, antiwar.com. I'm not sure why you'd be getting an rpc probe from them though. Maybe someone else can shed some light on that...
bwkaz
02-09-2005, 08:16 PM
My first reaction is that "sun-rpc portmapper" is an NFS thing. But there haven't really been a ton of vulnerabilities regarding NFS lately, so I'm not entirely sure why they'd be scanning to see if anyone had that in use.

But my second reaction is that RPC is a huge cause of bugs in Windows. It might be someone scanning to see if you're running a Windows machine that's vulnerable to one or more of these bugs.
JKlebs9225
02-11-2005, 06:41 PM
speaking of RPC, I do seem to recall a certain windows virus that went something like "recieved a shutdown signal from RPC, your computer will turn off in sixty seconds." I never actually got the virus on my computer, but I know several people who did. BTW, bwkaz, I am in a c++ computer science class at cal state, san bernardino, and it is constantly annoying me that the teacher always puts "using namespace std;" in the examples. The book we use does the same. I remember the teacher's explanation on the first day. "the 'using namespace std;' statement just needs to be there for it to work ." Every time we are in the lab, I comment it out like so
// using namespace std; EVIL!!!!
and put in using std::cout; etc... The most annoying part to me is that she doesn't even want to explain why it's needed. Ok, I'm done with my rant.
bwkaz
02-11-2005, 07:57 PM
Ah, yes, MS Blaster. That was a "fun" one to clean up after... :rolleyes:

;)