Re: Packet from port 80 with spoofed microsoft.com ip

From: Chris Wilkes <cwilkes(at)ladro.com>
Date: Wed Jan 29 2003 - 12:06:13 EST

On Wed, Jan 29, 2003 at 09:46:53PM +1100, Michael Rowe wrote:
>
> I received a packet on my cable modem today, allegedly from

Do you have any MS computers at home set to automatically check microsoft's site for updates?

I thought I had it turned off but poking around the GUI I found under Control Panel - Servers "Automatic Update" set to Automatic. What's odd is that it isn't in my tray and I thought I disabled it.

> No one was home at this time, and no computer running windows was

By "active" do you mean "turned off"?

Chris

---

This list is provided by the SecurityFocus ARIS analyzer service. For more information on this free incident handling, management and tracking system please see: http://aris.securityfocus.com Received on Wed Jan 29 18:29:30 2003