Archived from groups: comp.security.firewalls (More info?)

Like many others, I use Yproxy to decode yenc files.  I also run Agnitum
Firewall Pro.
 
Strangely, -after- I disconnect from Yproxy, the firewall reports
"suspicious packets" from Yproxy, presumably running a port scan.
 
Is this normal, or should I be alarmed?
 
Thanks,
 
Chas.

Archived from groups: comp.security.firewalls (More info?)

Can you provide more information, like what specific activity is reported?
In particular, what protocol and what are the source and destination ports
and addresses?
 
"Chas." <person@humankind.net> wrote in message
news:411037f6$0$449$c3e8da3@news.astraweb.com...
> Like many others, I use Yproxy to decode yenc files.  I also run Agnitum
> Firewall Pro.
>
> Strangely, -after- I disconnect from Yproxy, the firewall reports
> "suspicious packets" from Yproxy, presumably running a port scan.
>
> Is this normal, or should I be alarmed?
>
> Thanks,
>
> Chas.
>
>

Archived from groups: comp.security.firewalls (More info?)

I get reports of "suspicious packets" from the Yproxy site itself, just as I
disconnect from it.  The packets are sent to a different port each time.
 
Chas.
 
 
"Nobody" <nobody@nowhere.com> wrote in message
news:C0wQc.21111220$Id.3497445@news.easynews.com...
> Can you provide more information, like what specific activity is reported?
> In particular, what protocol and what are the source and destination ports
> and addresses?
>
> "Chas." <person@humankind.net> wrote in message
> news:411037f6$0$449$c3e8da3@news.astraweb.com...
> > Like many others, I use Yproxy to decode yenc files.  I also run Agnitum
> > Firewall Pro.
> >
> > Strangely, -after- I disconnect from Yproxy, the firewall reports
> > "suspicious packets" from Yproxy, presumably running a port scan.
> >
> > Is this normal, or should I be alarmed?
> >
> > Thanks,
> >
> > Chas.
> >
> >
>
>

I think you mean when you connect.  Look up the topic "Message of the Day" in yProxy's help file.  When you start the yProxy server, yProxy polls the website for a message of the day via HTTP, just like a web browser.  The web server responds via HTTP indicating that there is no message of the day.
 
If you look at the packets, you'd see this.