Re: [FW1] service 41508

[Joe Matusiewicz <joem@FW1-NOSPAMnist.gov>]

At 11:12 AM 9/12/00, Laurin Buchanan wrote:

> Greetings Firewallers:
>
> Does anyone know what might legitimately use service 41508, or a
> vulnerability that is based on this service?  I've checked IANA list, this
> specific port is in the "unassigned" group.  All of a sudden my fw-1 logs
> are flooded with dropped entries to my DMZ broadcast address on this
> service:
>
> Service | source | destination | protocol | rule | length
> 41508 | Firewall_External | X.X.X..255 | udp | cleanup | 216

I wrote in my notes that Inoculan clients use UDP port 41508 when they look 
for updates.


Hope this helps....


-- Joe



================================================================================
    To unsubscribe from this mailing list, please see the instructions at
              http://www.checkpoint.com/services/mailing.html
================================================================================