why would online poker room scan my port?

[Paul G]

I have Black Ice firewall. There's always a bunch of intruders or probe
attempts or whatever after a session online. But most of them are not
severe and are colored yellow in Black Ice's list.

I noticed this more severe orange warning from a certain online poker
software and it said TCP Port Scan. What is a TCP Port Scan? And it says
it was attempted yesterday, although I also played today but no intruder
warning today, just yesterday.

What is a TCP Port Scan and why would a poker room want to scan my port?

I feel so used. And I'm walking a little funny.

-paul g.

[Ken Lovering]

Where do I get this Black Ice firewall? Or do you own stock in the company?

Thanx,
Ken
"Paul G" <pgennaro@pacbell.net> wrote in message
news:X_tcb.639$h44.141763856@newssvr13.news.prodigy.com...
> I have Black Ice firewall. There's always a bunch of intruders or probe
> attempts or whatever after a session online. But most of them are not
> severe and are colored yellow in Black Ice's list.
>
> I noticed this more severe orange warning from a certain online poker
> software and it said TCP Port Scan. What is a TCP Port Scan? And it says
> it was attempted yesterday, although I also played today but no intruder
> warning today, just yesterday.
>
> What is a TCP Port Scan and why would a poker room want to scan my port?
>
> I feel so used. And I'm walking a little funny.
>
> -paul g.
>
>

[Paul G]

"Ken Lovering" <taintedrogue@adelphia.net> wrote in message
news:bktr2v$5p8qo$1@ID-196892.news.uni-berlin.de...
> Where do I get this Black Ice firewall? Or do you own stock in the
company?
>
> Thanx,
> Ken


Uh, I don't get it. But I guess I got it at CompUSA or somethin like that.

I don't look at it much. Maybe this poker room/casino does this regularly
but I never noticed it until just recently. Does it mean anything much?

-Paul G

[Paul G]

"eggrock" <eggrock@spam-me-gently-yahoo.com> wrote in message
news:b%ucb.4950$Rd4.739@fed1read07...
>

> Did it say what port number was scanned? Tech support from that poker site
> will be able to tell you what port(s) the game runs on; if it's one of
> those, not to worry. If it's something like 137 you might want to worry
(and
> report it to the poker site).

I don't see where it might say that. And really it wasn't the poker site.
It says it is from the software company. Frankly, it was Cryptologic. I
have always liked Cryptologic and never had a problem with any of their
clients. But I was just wondering what that "port scan" meant. I'm not very
computer knowledgeable.


>
> Some port scans are bad, some are normal or a result of crappy software
(HP
> print software is notorious for scanning IP blocks.)

Oh? There's a whole bunch of orange warnings from HPPAV and it says
something about Hewlitt Packard. I was wondering what that was also.
Thanks for the information.

-paul







Black Ice should
> prevent anything malicious (also add Zone Alarm if you can, it's a freebie
> and I /think/ you can run them both concurrently.)
>
>

[rAilz]

"Ken Lovering" <taintedrogue@adelphia.net> wrote in message
news:bktr2v$5p8qo$1@ID-196892.news.uni-berlin.de...
> Where do I get this Black Ice firewall? Or do you own stock in the
company?


Don't bother with BID - it's a pile of crap and still leaves ports wide
open. Go with the free personal edition of Zone Alarm.

[Jester]

Zone Alarm is a popular firewall for windoze users. Same crap as black
ice, but zone alarm seems to be well respected.

The software from the poker site is probably needs access to that
certain port to run.

Not a big deal.


--
Jester - River Catcher
------------------------------------------------------------------------
Access RGP from Pokeritis.com, create a poker journal, and more.
http://www.pokeritis.com/forums
View this thread @ Pokeritis.com forums: http://www.pokeritis.com/forums/showthread.php?threadid=21785

[Bill]

Just ask the poker place what port they use. TCP is a protocol that is
used widely on the internet. Specific sites use different TCP ports to
communicate with your PC.

What poker site is this?
On Sep 24 2003 11:16PM, Paul G wrote:

> I have Black Ice firewall. There's always a bunch of intruders or probe
> attempts or whatever after a session online. But most of them are not
> severe and are colored yellow in Black Ice's list.
>
> I noticed this more severe orange warning from a certain online poker
> software and it said TCP Port Scan. What is a TCP Port Scan? And it says
> it was attempted yesterday, although I also played today but no intruder
> warning today, just yesterday.
>
> What is a TCP Port Scan and why would a poker room want to scan my port?
>
> I feel so used. And I'm walking a little funny.
>
> -paul g.

_________________________________________________________________
Posted using RecPoker.com - http://www.recpoker.com

[Paul G]

"Bill" <anonymous@yahoo.com> wrote in message
news:3f72ca08$0$221$9a6e19ea@news.newshosting.com...
> Just ask the poker place what port they use. TCP is a protocol that is
> used widely on the internet. Specific sites use different TCP ports to
> communicate with your PC.
>
> What poker site is this?

Thankyou for info. I guess it is no big deal. The site was Cryptologic,
which is very legit software in my opinion.

-paul g.

[eggrock]

"Paul G" <pgennaro@pacbell.net> wrote in message
news:8fvcb.2937$CL4.34@newssvr29.news.prodigy.com...
>
> "eggrock" <eggrock@spam-me-gently-yahoo.com> wrote in message
> news:b%ucb.4950$Rd4.739@fed1read07...
> >
>
> > Did it say what port number was scanned? Tech support from that poker
site
> > will be able to tell you what port(s) the game runs on; if it's one of
> > those, not to worry. If it's something like 137 you might want to worry
> (and
> > report it to the poker site).
>
> I don't see where it might say that. And really it wasn't the poker site.
> It says it is from the software company. Frankly, it was Cryptologic. I
> have always liked Cryptologic and never had a problem with any of their
> clients. But I was just wondering what that "port scan" meant. I'm not
very
> computer knowledgeable.
>

This page provides a decent example:
http://compnetworking.about.com/library/tips/blfaq012.htm

The single quote from the page says it all:

"Port numbers and their associated network addresses work something like
telephone numbers and associated extensions."

IP = phone number
port = extension

Basically. I can't get into too much detail because I don't know the
intrinsics either.

[desire]

Years ago, when I was still playing Paradise Poker, my firewall would
alert me on Paradise pinging me....when I wasn't at their site. They
collect information to see where you're surfing online.

[Randy Hudson]

In article <X_tcb.639$h44.141763856@newssvr13.news.prodigy.com>,
Paul G <pgennaro@pacbell.net> wrote:

> What is a TCP Port Scan and why would a poker room want to scan my port?

A Port Scan is when requests are sent to multiple ports on your computer.
It's reported by firewalls because it's a sign that someone may be looking
for a way to attack your computer.

A poker site might be trying to set up a connection despite the existence of
a firewall and/or proxy server; in such a case, the client would "listen" at
multiple ports and the server would try all those ports, looking for its
client.

Similarly, it might be checking if you have tables that you were playing at
when a connection was lost, earlier, so that it can reestablish those
connections.

Or, it might be looking for another connection to the same site, such as for
horse racing, sports betting, or blackjack.

Or, it might be protective, trying to ensure that you aren't logged on under
multiple IDs at once.

Or, it might be surveying to see if you are using a competing online
cardroom's software.

You probably should ask the site.

--
Randy Hudson

[Kimosabe]

I don't know what this all about either, but I'll add a couple of
comments.

I had the paid version of Zone Alarm and was happy with it, but
switched to the free version of Sygate. The computer runs out of RAM
not nearly as soon as before, when I needed frequent restarts. I
think I got Sygate from either ZDnet.com or tudogs.com. (No, I am not
a shill, a stockholder, a marxist, etc. etc.)

I also use Spyblocker, which reports when a comptuer is 'contacting'
mine. I then get the option to accept or decline. I don't get the
names of the other computer, just the number, and as a policy, I
always decline contact.

The point being, that these contacts are not needed for the continued
play of the game.

[Jay]

There are viruses that do the same thing. Although it is highly
unlikely that was the case. Because if a virus gets a hold of a valid
IP subnet, it will start broardcasting to all avaliable addresses,
creating so much network traffic that the site's servers wold go down.

"Paul G" <pgennaro@pacbell.net> wrote in message news:<X_tcb.639$h44.141763856@newssvr13.news.prodigy.com>...
> I have Black Ice firewall. There's always a bunch of intruders or probe
> attempts or whatever after a session online. But most of them are not
> severe and are colored yellow in Black Ice's list.
>
> I noticed this more severe orange warning from a certain online poker
> software and it said TCP Port Scan. What is a TCP Port Scan? And it says
> it was attempted yesterday, although I also played today but no intruder
> warning today, just yesterday.
>
> What is a TCP Port Scan and why would a poker room want to scan my port?
>
> I feel so used. And I'm walking a little funny.
>
> -paul g.

[Earl]

Why would you run out of RAM with Zone Alarm?? It only uses 5 meg and I
don't see a memory leak.

"Kimosabe" <kimosabe621@yahoo.com> wrote in message
news:5d767657.0309261056.6045d81@posting.google.com...
> I don't know what this all about either, but I'll add a couple of
> comments.
>
> I had the paid version of Zone Alarm and was happy with it, but
> switched to the free version of Sygate. The computer runs out of RAM
> not nearly as soon as before, when I needed frequent restarts. I
> think I got Sygate from either ZDnet.com or tudogs.com. (No, I am not
> a shill, a stockholder, a marxist, etc. etc.)
>
> I also use Spyblocker, which reports when a comptuer is 'contacting'
> mine. I then get the option to accept or decline. I don't get the
> names of the other computer, just the number, and as a policy, I
> always decline contact.
>
> The point being, that these contacts are not needed for the continued
> play of the game.