[tor-relays] Network Scan through Tor Exit Node (Port 80)

Fabio Pietrosanti (naif) lists at infosecurity.ch
Tue Mar 29 13:46:47 UTC 2011


On 3/29/11 3:30 PM, cmeclax-sazri wrote:
> Opening a web page with lots of images results in lots of connections to web 
> servers. If I hit the stop button before the images are loaded, my browser 
> will close those connections without receiving any data. Web pages do not 
> normally contain lots of HTTP links to sites that aren't running web servers, 
> so a lot of refused connections does not look like anything that can happen 
> in normal web browsing. Port scanning results in lots of connections closed 
> upon opening and lots of connections refused; the distinctor is the lots of 
> connections refused.
Ok, anyone willing to implement a portscan detector using such logic? :-)

I candidate myself to test it with the risk of getting Bad-Exited ;P

-naif


More information about the tor-relays mailing list