[Wolves] what the hell is DCOM-scm

[David Goodwin]

David Morley wrote:
> I've set up firestarter as a basic firewall but what the hell are these 
> inbound service connections
> 
> DCOM-scm from blueyonder <- ??
> UDP Samba <- File sharing
> Microsoft-ds from blueyonder (might be something to do with aMsn) <- File sharing
> MS-SQL-S <- SQL (Probably sql slammer or what ever it was called)
> MS-SQL-M <- SQL (ditto)
> HTTP from walsall, dudley, wolverhampton blueyonder <- IIS attacks
> Unknown UDP's from about 20 addresses <- Random scanning or looking for other holes
> 
> Is there a site where I can look up whats what, that is written for 
> someone who has no idea about firewalls.

(See comments above)

/etc/services _may_ help, but probably won't.

There are quite a few sites that have remote firewall checkers if that's 
of any use (e.g. they run nessus against your box) and email you the 
results.

thanks
David

-- 
David Goodwin
w: http://www.clocksoft.co.uk
e: david.goodwin at clocksoft.com
t: 0121 313 3850