|
Ok, a few more infos.
I think the thing about the ports 25 and 110 was bull. Seems, the portscanner wasnt that good. I found out, that there is a sshd running (dropbear) and that it is accessible during ids connection (only for a short period of time) and there also seems to be an open port 6000. Dont know, what that is for.
The network seems to be shut of again, after testing or ids connection is done.
i added a tcp-dump (wireshark) of the ids connection. (150 is the iliad, 99 the gateway)
|