Re: RHN= subseven ???

[Hal Burgiss <hal foobox net>]

On Sun, Dec 30, 2001 at 02:42:19PM -0500, Richard Hebert wrote:
> This is a  funny story... 
> Im watching the firewall here.. says port 1234 subseven ...
> 216.148.218.166  ok  so i check with the DNS .. says  rhn.redhat.com
> 
> I looked outside.. sure this was a prank .. again and  again 
> it hits... still when i check i get  rhn.redhat.com 
> 
> Why would rhn use port 1234 ? 
> Does RH use port 1234 ? 
> 
> i dont get this one.. : ) 

Ports > 1023 are dynamically assigned by the kernel as required for
return connections. Normal stuff really, and just a coincidence that
it hits a port of a known MS trojan. 

-- 
Hal Burgiss