Merit Network
Can't find what you're looking for? Search the Mail Archives.
  About Merit   Services   Network   Resources & Support   Network Research   News   Events   Home

Discussion Communities: Merit Network Email List Archives

North American Network Operators Group

Date Prev | Date Next | Date Index | Thread Index | Author Index | Historical

Re: Computer systems blamed for feeble hurricane response?

  • From: Valdis.Kletnieks
  • Date: Tue Sep 13 16:44:17 2005

On Tue, 13 Sep 2005 15:50:12 EDT, Joseph S D Yao said:

> Oh, and also ... please consider that some firewalls try to discern
> whether the connection on port 25 is from a mail server or from Telnet.

OK, I'll bite.  A long time ago, I saw code that would trap the fact that many
telnet binaries would send option negotiation on ports other than 21.  What
are they keying off now? Since the host in question gave a 'Connection Refused',
it obviously made its decision based on the initial SYN packet.  So what are
they looking at?  TCP options? initial window? other?

16:25:37.240700 IP h80ad2467.async.vt.edu.43404 > listserv.vt.edu.smtp: S 1026334142:1026334142(0) win 5840 <mss 1460,sackOK,timestamp 3672334 0,nop,wscale 2>
16:25:57.420455 IP h80ad2467.async.vt.edu.45093 > listserv.vt.edu.smtp: S 1074086420:1074086420(0) win 5840 <mss 1460,sackOK,timestamp 3677379 0,nop,wscale 2>

One was a telnet connection, one was Sendmail.  Damned if I can tell.. ;)

Of course, a busticated firewall trying to tell the difference *would* explain why
they aren't accepting mail. :)

Attachment: pgp00023.pgp
Description: PGP signature




Discussion Communities


About Merit | Services | Network | Resources & Support | Network Research
News | Events | Contact | Site Map | Merit Network Home


Merit Network, Inc.