> That supposes that the connection are with legitimate clients, but since the
> OP referred to "SOME.RANDOM.IP.ADDR", and "connections ... to the outside
> world", I suspect it was an open proxy.
Maybe.. It depends on how random they are...
Still the "destination port is random, source port is my service port"
pattern is typical in the scenario I described.
--
/kinkie
Received on Fri May 04 2007 - 13:52:12 MDT
This archive was generated by hypermail pre-2.1.9 : Fri Jun 01 2007 - 12:00:04 MDT