Re: Broadcasting on port 31337?

[Alan Horn <ahorn deorth org>]

On Mon, 9 May 2005, Richard Crawford wrote:

> Date: Mon, 9 May 2005 14:14:59 -0700
> From: Richard Crawford <rscrawford mossroot com>
> Reply-To: For users of Fedora Core releases <fedora-list redhat com>
> To: For users of Fedora Core releases <fedora-list redhat com>
> Subject: Broadcasting on port 31337?
>
> Our IT guy tells me that my Linux laptop is broadcasting on port 31337.  And
> while I don't trust his competence, I am concerned about this.  I've looked
> around and it looks like 31337 is used by Back Orifice which, as far as I
> know, is a Windows beast.
>
> I've added an IPTABLES rule to block outbound traffic to that port from my
> computer but I still need to figure out what's going on.  Anyone have any
> ideas?

If it was just a single event it's possible you happened to use a high 
numbered ephemeral port for something that was 31337.

Coincidences do happen :)

Cheers,

Al