RE: Port scans to UDP 161 (SNMP)

Max Euston (meustonjmrodgers.com)
Wed, 27 May 1998 15:14:54 -0400

• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]
• Next message: Jim Hebert: "Questions on Firewall-1 and Neighborhood Browser"
• Previous message: Asier Azaceta: "Newbie question - IP routing through a firewall"

[First off: sorry for the delay in responding, I finally had a long weekend
off!]

Thanks to all who responded - especially H. Morrow Long
<morrow.longyale.edu>!!!

It seems that some W-95 machines (specifically laptops?) have HP JetAdmin
installed incorrectly. I talked to the owner of the machine and we found
that the laptop in question had a subnet defined as "205.0.0.0"! We
changed this as described in http://web.mit.edu/network/hpfix. It refers
to registry entry HKEY_LOCAL_MACHINE/ Software/ HP Jet Admin/ TCPIP (the
tree from this point down seems to be version dependent, but you can easily
find it).

Thanks for the help!!!

Max

P.S. I seem to be getting more and more of these scans. I think that I am
just going to have to block them without logging them (poor signal/noise
ratio).

Max

---
Max Euston <meustonjmrodgers.com>

• Next message: Jim Hebert: "Questions on Firewall-1 and Neighborhood Browser"
• Previous message: Asier Azaceta: "Newbie question - IP routing through a firewall"

This archive was generated by hypermail 2.0b3 on Sat Jul 17 1999 - 07:10:54 CDT