Broadcasting on port 31337?

Alan Horn ahorn at deorth.org
Mon May 9 21:25:19 UTC 2005


On Mon, 9 May 2005, Richard Crawford wrote:

>Date: Mon, 9 May 2005 14:14:59 -0700
>From: Richard Crawford <rscrawford at mossroot.com>
>Reply-To: For users of Fedora Core releases <fedora-list at redhat.com>
>To: For users of Fedora Core releases <fedora-list at redhat.com>
>Subject: Broadcasting on port 31337?
>
> Our IT guy tells me that my Linux laptop is broadcasting on port 31337.  And
> while I don't trust his competence, I am concerned about this.  I've looked
> around and it looks like 31337 is used by Back Orifice which, as far as I
> know, is a Windows beast.
>
> I've added an IPTABLES rule to block outbound traffic to that port from my
> computer but I still need to figure out what's going on.  Anyone have any
> ideas?

If it was just a single event it's possible you happened to use a high 
numbered ephemeral port for something that was 31337.

Coincidences do happen :)

Cheers,

Al




More information about the fedora-list mailing list