Author |
Message |
nobbe
Member
|
# Posted: 10 Nov 2003 18:37
Reply
'eyo, 'ere's a question. What's typically on port 53? Recently I've noticed my firewall has be blocking a lot of attempts to access said port...anything interesting on it?
|
lupus
Member
|
# Posted: 11 Nov 2003 01:57
Reply
I dont think so. It was only an organics port if I remember right.
sorry I couldnt resist.
Lupus
|
data
Member
|
# Posted: 11 Nov 2003 08:04
Reply
nothing really interesting on port 53. As long as your firewall is preventing it you should be ok. There is word around that certain programs use port 53 to carry out Denial of Service attacks.
This might be worth a look too http://www.whitehats.com/library/worms/lion/index.html
|
quincyw
Member
|
# Posted: 12 Nov 2003 02:14
Reply
I did a search on Google (who doesn't these days?). Apparently, Port 53 is used by the DNS (Domain Name Server). DNS is used to interpret a URL, find out the IP address of the server and then direct traffic to that machine.
Apparently it is a brand new type of attack (because of how the DNS works) because the damaging of one DNS would lead it to propagate to other DNSs. Which means that it's basically a round robin effect whereby some DNSs think a particular server's down while others in direct communication will send updates saying it isn't.
|