Internet scans on port 389

[Tony Earnshaw <tonye@billy.demon.nl>]

List,

Although the following has nothing to do directly with the vendor
software used, it does have a bearing on how that software is
configured.

It's worth mentioning that port 389 has reached the top 10 Internet
ports being scanned (SANS ISC, http://isc.sans.org/). Why this should be
is not reported.

It might be as well to pay extra attention to your firewalling of this
port, if your LDAP transactions involve sensitive information, and even
to consider exclusively using TLS for transactions using this port.

Best,

--Tonni 

-- 

mail: billy - at - billy.demon.nl
http://www.billy.demon.nl