Re: Kodak - Radio Interview MP3 file

[James Fidell <james@xxxxxxx>]

Quoting Mark McCall (mark@xxxxxxx):
> Can anyone tell me what this means??  Is the a Trojan on my machine??
>
> Running PC Cillan now :(
>
> M.
>
>   ----- Original Message -----
>   From: Kenneth Watt
>   To: ukha_d@xxxxxxx
>   Sent: Saturday, January 12, 2002 11:39 PM
>   Subject: RE: [ukha_d] Kodak - Radio Interview MP3 file
>
>
>   Courtesy of Norton Personal Firewall:
>
>   Date: 12/01/2002 Time: 23:37:47
>   Security alert displayed for rule Default Block Sokets de Trois v1.
>   Trojan horse.
>   Remote computer (mccalls.2waky.com(213.123.192.140), ftp-data(20))
>
>   Needless to say I did not get access to the url!

It shouldn't be anything to worry about -- just an artefact of the
way that FTP works.  When you connect to a machine to FTP from it
your machine connects from a random port on your machine to port 21 on
the remote system.  This channel is only used as a control channel
though (except in circumstances I won't go into here).  To get files
transferred back to your system, your FTP client starts listening
on port 20 and the remote system then connects back to that port
to initiate the data transfer.

Firewalls often block this back-connection because it's initiated from
outside the firewall.  Some are configurable enough to allow these
inbound connections if there is an open outbound control channel between
the same machines.  Otherwise using passive FTP usually works.

James