pen-test
[Top] [All Lists]

Re: Re: Strange ports

To: "Thor (Hammer of God)" <thor@hammerofgod.com>
Subject: Re: Re: Strange ports
From: "Bojan Zdrnja" <bojan.zdrnja@gmail.com>
Date: Sat, 23 Jun 2007 19:19:56 +1200
Cc: pen-test@securityfocus.com
Delivered-to: sp-com-lists@consult.net
Delivered-to: pentest-list2@consult.net
Delivered-to: mailing list pen-test@securityfocus.com
Delivered-to: moderator for pen-test@securityfocus.com
Dkim-signature: a=rsa-sha1; c=relaxed/relaxed; d=gmail.com; s=beta; h=domainkey-signature:received:received:message-id:date:from:to:subject:cc:in-reply-to:mime-version:content-type:content-transfer-encoding:content-disposition:references; b=I8SIi7P0XfCdfXJNdii9IqERtE/FGsCdd7aw5riR70B9987fBNR9ffBpWhBS/G896cCeZRbwWhDDRpd8QRSQugp4iQZ/g7AtMKyf61+9JjP/2BnsD8Wgp3N+QJgZjE+iGlV/ZjL0qzoLxa7F2xXTq4w73lKtIIYXCxQwMRQwFMQ=
Domainkey-signature: a=rsa-sha1; c=nofws; d=gmail.com; s=beta; h=received:message-id:date:from:to:subject:cc:in-reply-to:mime-version:content-type:content-transfer-encoding:content-disposition:references; b=KGyOyfnoKZdpZV4A7nQuMJ97KYaLq0/rZiytTLJGuM1bW8jJUl4jxzBg34A+cEP7bn2pZunDROfpxW3bEBixchzAwP1n5iqOKYsNZZmUdDyNEG0kHlANVFFw8Fy+lE9e4VYyeupUtLjvUkb+Tp+yXUlq2OanYbPaec8w3Pzm+5E=
In-reply-to: <49A1E328069F40C1874009BBBDE91918@MoFo>
List-help: <mailto:pen-test-help@securityfocus.com>
List-id: <pen-test.list-id.securityfocus.com>
List-post: <mailto:pen-test@securityfocus.com>
List-subscribe: <mailto:pen-test-subscribe@securityfocus.com>
List-unsubscribe: <mailto:pen-test-unsubscribe@securityfocus.com>
Mailing-list: contact pen-test-help@securityfocus.com; run by ezmlm
References: <20070622114121.8452.qmail@securityfocus.com> <49A1E328069F40C1874009BBBDE91918@MoFo>
Resent-date: Sat, 23 Jun 2007 11:52:48 -0600 (MDT)
Resent-from: pen-test-return-1078484447@securityfocus.com
Resent-message-id: <20070623175248.B08F4237352@outgoing3.securityfocus.com>
Resent-sender: listbounce@securityfocus.com
Sender: listbounce@securityfocus.com
On 6/23/07, Thor (Hammer of God) <thor@hammerofgod.com> wrote:
If you use Exchange (well, specifically, if Exchange is doing the DNS
lookup) then you do need TCP 53 as Exchange SMTP (or IIS SMTP) uses TCP by
default for DNS queries.  This is actually a good thing, as it is easier to

TCP by default? So you are saying that Exchange doesn't use system's
resolver but instead has an internal one?
This is pretty interesting, can you point to Microsoft's documentation
about this?

Cheers,

Bojan

------------------------------------------------------------------------
This List Sponsored by: Cenzic

Are you using SPI, Watchfire or WhiteHat?
Consider getting clear vision with Cenzic
See HOW Now with our 20/20 program!

http://www.cenzic.com/c/2020
------------------------------------------------------------------------


<Prev in Thread] Current Thread [Next in Thread>