Skip site navigation (1)Skip section navigation (2)
Date:      Fri, 4 Jan 2002 15:39:17 -0800 (PST)
From:      Doug White <dwhite@resnet.uoregon.edu>
To:        Sam Drinkard <sam@wa4phy.net>
Cc:        freebsd-stable@FreeBSD.ORG
Subject:   Re: Something about port 111
Message-ID:  <20020104153801.K65848-100000@resnet.uoregon.edu>
In-Reply-To: <3C363624.39425529@vortex.wa4phy.net>

next in thread | previous in thread | raw e-mail | index | archive | help
On Fri, 4 Jan 2002, Sam Drinkard wrote:

>     This might be slightly off topic, but am curious, since it just
> started after going to 4.5-Pre.  I've noticed a tremendous increase in I
> assume portscans for port 111, since the upgrade.  AFIK, no one has
> gotten through, and I've not seen anything in particular about port 111
> in security.  IS there something vulnerable about 111 that would have
> increased a cracker's chance in gaining access via that port?

port 111 is portmap, which has a less than stellar security record. In
particular most Linux versions of it are easily exploitable, so there are
plenty of scanners on the Internet looking for them.

Unless you're mounting NFS volumes across the Internet you should block
it, or if you aren't using NFS at all, you should turn it off.

Doug White                    |  FreeBSD: The Power to Serve
dwhite@resnet.uoregon.edu     |  www.FreeBSD.org


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-stable" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20020104153801.K65848-100000>