Suspicious Packets Using Yproxy

[Guest]

Archived from groups: comp.security.firewalls (More info?)

Like many others, I use Yproxy to decode yenc files. I also run Agnitum
Firewall Pro.

Strangely, -after- I disconnect from Yproxy, the firewall reports
"suspicious packets" from Yproxy, presumably running a port scan.

Is this normal, or should I be alarmed?

Thanks,

Chas.

 

[nobody]

Archived from groups: comp.security.firewalls (More info?)

Can you provide more information, like what specific activity is reported?
In particular, what protocol and what are the source and destination ports
and addresses?

"Chas." <person@humankind.net> wrote in message
news:411037f6$0$449$c3e8da3@news.astraweb.com...
> Like many others, I use Yproxy to decode yenc files. I also run Agnitum
> Firewall Pro.
>
> Strangely, -after- I disconnect from Yproxy, the firewall reports
> "suspicious packets" from Yproxy, presumably running a port scan.
>
> Is this normal, or should I be alarmed?
>
> Thanks,
>
> Chas.
>
>

 

[Guest]

Archived from groups: comp.security.firewalls (More info?)

I get reports of "suspicious packets" from the Yproxy site itself, just as I
disconnect from it. The packets are sent to a different port each time.

Chas.


"Nobody" <nobody@nowhere.com> wrote in message
news:C0wQc.21111220$Id.3497445@news.easynews.com...
> Can you provide more information, like what specific activity is reported?
> In particular, what protocol and what are the source and destination ports
> and addresses?
>
> "Chas." <person@humankind.net> wrote in message
> news:411037f6$0$449$c3e8da3@news.astraweb.com...
> > Like many others, I use Yproxy to decode yenc files. I also run Agnitum
> > Firewall Pro.
> >
> > Strangely, -after- I disconnect from Yproxy, the firewall reports
> > "suspicious packets" from Yproxy, presumably running a port scan.
> >
> > Is this normal, or should I be alarmed?
> >
> > Thanks,
> >
> > Chas.
> >
> >
>
>

 

[m_whatever]

I think you mean when you connect. Look up the topic "Message of the Day" in yProxy's help file. When you start the yProxy server, yProxy polls the website for a message of the day via HTTP, just like a web browser. The web server responds via HTTP indicating that there is no message of the day.

If you look at the packets, you'd see this.