Continual knocking on port 443 from foreign IP address


 
Thread Tools Search this Thread
Special Forums Cybersecurity Continual knocking on port 443 from foreign IP address
Prev   Next
# 6  
Old 03-21-2014
Thanks to all for your answers. I really appreciate it.

@corona688...Indeed it is a proxy into our private nets. Excellent point...

@Perderabo - Excellent...this makes sense too. I had the DROP and REJECT functionality 'switched' in my original understanding. What you described makes perfect sense and explains to me what I was asking and what is going on.

Thanks
 
Login or Register to Ask a Question

Previous Thread | Next Thread

9 More Discussions You Might Find Interesting

1. IP Networking

netstat local and foreign address relationship.

Hi All, Can you please help me in understanding the relationship between local and foreign address in the output of netstat -an. Output 1 ---------- 162.103.162.37.50224 162.103.162.35.9511 49640 0 49640 0 ESTABLISHED 162.103.162.37.50263 162.103.162.35.9512 49640 0... (1 Reply)
Discussion started by: Girish19
1 Replies

2. HP-UX

How to open 443 port in HP-UX?

Hello Experts, I want to open the port 443 on my HP-UX system. can you please help ? Thanks in advance. (1 Reply)
Discussion started by: purushottamaher
1 Replies

3. UNIX for Advanced & Expert Users

What is the foreign address?

hi i want to open port 9100 and the connect server could not to connect to my application this my results of netstat tulpn Active Internet connections (w/o servers) Proto Recv-Q Send-Q Local Address Foreign Address State tcp 0 0 localhost:9100 ... (3 Replies)
Discussion started by: mohammad alshar
3 Replies

4. Solaris

Allow usage of port 80 and 443

I am trying to install Sun Java Web Server using an ordinary user with no root/sudo rights. I need to allow this web server to use ports 80 and 443. How can this be done?:confused: (1 Reply)
Discussion started by: emealogistics
1 Replies

5. Cybersecurity

Listening to port when no IP address is assigned

Hi Pals Consider a case where the network interface is there and it is connected to a network. Only thing left here is I need to set a static ip/ip though dhcp (though ifconfig) I heard that it is possible to listen even if the ip address is not set. So is there any possibility of an attack over... (1 Reply)
Discussion started by: sreejithc
1 Replies

6. IP Networking

Configure squid to listen on any IP address with port 80

Hi, I am trying to configure a transparent squid cache. When I try to use the below option in squid.conf, squid listens on port 80 only for the IP address configured on the system's interface. http_port 80 transparent But I want squid to accept connections for any IP address on port 80.... (3 Replies)
Discussion started by: Learner32
3 Replies

7. Cybersecurity

Port Address Changing....

Is there a software solution to stop intruders from changing my port addresses? Causes IPmap to crash. Platform is OS/X Leopard. (1 Reply)
Discussion started by: aleatory
1 Replies

8. Solaris

How To Change 5 port Ip Address Solaris?

Hello i'm newbie in solaris, anybody know how to change five port solaris 10? exmpe: bge0, bge1, bge2, etc. anybody can help me with the script implementasi... and logical how solaris work. thank so much:b: (2 Replies)
Discussion started by: yanto85
2 Replies

9. UNIX for Advanced & Expert Users

Sunblade shows 2 MAC address on same port

Please, can someone tell me why my SunBlade would be showing 2 different but similar MAC addresses on the same port on the Switch? The switch shows all other Workstations with 1 MAC on each port, but the SunBlade is showing 2. Thanks in advance for any insight.... (1 Reply)
Discussion started by: GoneCrazy
1 Replies
Login or Register to Ask a Question
TCPDROP(8)						    BSD System Manager's Manual 						TCPDROP(8)

NAME
tcpdrop -- drop TCP connections SYNOPSIS
tcpdrop local-address local-port foreign-address foreign-port tcpdrop [-l] -a DESCRIPTION
The tcpdrop command may be used to drop TCP connections from the command line. If -a is specified then tcpdrop will attempt to drop all active connections. The -l flag may be given to list the tcpdrop invocation to drop all active connections one at a time. If -a is not specified then only the connection between the given local address local-address, port local-port, and the foreign address foreign-address, port foreign-port, will be dropped. Addresses and ports may be specified by name or numeric value. Both IPv4 and IPv6 address formats are supported. The addresses and ports may be separated by periods or colons instead of spaces. EXIT STATUS
The tcpdrop utility exits 0 on success, and >0 if an error occurs. EXAMPLES
If a connection to httpd(8) is causing congestion on a network link, one can drop the TCP session in charge: # sockstat -c | grep httpd www httpd 16525 3 tcp4 192.168.5.41:80 192.168.5.1:26747 The following command will drop the connection: # tcpdrop 192.168.5.41 80 192.168.5.1 26747 The following command will drop all connections but those to or from port 22, the port used by sshd(8): # tcpdrop -l -a | grep -vw 22 | sh SEE ALSO
netstat(1), sockstat(1) AUTHORS
Markus Friedl <markus@openbsd.org> Juli Mallett <jmallett@FreeBSD.org> BSD
January 30, 2013 BSD