Tahaka et al.

No, apache is running on a different host.  The telnet application that I'm 
running is on a Win2K platform but it is not using a client built into the 
OS; it is a third party program.

As far as the incoming port numbers, I thought it was weird in the setup of 
m0n0wall in that I could not select "Any" for incoming ports.  It made me 
select 'telnet' although perhaps any is what ends up in the actual rules.  I 
was just wondering if ipfilter does not like incoming ports outside of a 
certain range and that perhaps a wider range of port numbers is trying to 
access my host than ipfilter is set up for...

Thanks, Ernie


----- Original Message ----- 
From: "taharka" <res00vl8 at alltel dot net>
To: <m0n0wall at lists dot m0n0 dot ch>
Sent: Tuesday, December 21, 2004 4:43 PM
Subject: Re: [m0n0wall] Firewall Problem with Telnet


> Ernie Zingleman wrote:
>
>> Chris and Others,
>>
>> Here are the 'lat 50 filter log' entries from a couple of days ago.  I 
>> had tried to post the entire status.php to the list but it was, of 
>> course, too big!
>> I would appreciate your insight into what I might be doing wrong here. 
>> I've flagged the Telnet entries with a ** a the beginning and end of the 
>> line.
>> Is there possibly a mismatch in the filtering?  Should telnet traffic be 
>> originating on ports 3025 or 4109?
>>
> Doesn't matter what port the telnet traffic is originating on. Your user's 
> telnet client port address is allocated to the client dynamically when it 
> begins execution & the telnetd daemon running on your host doesn't need to 
> know the port number of the incoming telnet client beforehand. BTW, 
> netcraft.com says your site, zingleman.com is running Linux Apache/2.0.51 
> (Fedora). Is the telnetd daemon running on that host also?
> <snip>
>
> !!SEASONS GREETINGS!!
>
> taharka
> Lexington, Kentucky U.S.A.
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: m0n0wall dash unsubscribe at lists dot m0n0 dot ch
> For additional commands, e-mail: m0n0wall dash help at lists dot m0n0 dot ch
>
>