ARN & Out of Band Data

[choey]

One of our ARN routers was picked up by our organization's IDS, as sending out OOB data from port 21, out to IP's outside of our network. I have doubts that this is a DoS attack emanating from the router, because there have only been 4 OOB packets sent, spanning a 3 week period.

If anyone can enlighten me on why this ARN router sends out OOB data, I would appreciate it.

Thanks,
Choey

 

[katamann]

Hi
Is the ftp server enabled on the arn and/or is the router accessible on port 21 from the external networks?

 

[choey]

Wow, I didn't know the ARN had built in FTP capabilities. I will have to look into that. I just tried to FTP to the IP from internally, and no go..

 

[katamann]

If the ti scripts are in place, I think you can use the command 'enable ftp' to activate the ftp server. If not, use site manager or bcc.