From owner-freebsd-net@FreeBSD.ORG Tue Aug 24 04:21:23 2004 Return-Path: Delivered-To: freebsd-net@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id E50DC16A4CE for ; Tue, 24 Aug 2004 04:21:23 +0000 (GMT) Received: from mta13.adelphia.net (mta13.mail.adelphia.net [68.168.78.44]) by mx1.FreeBSD.org (Postfix) with ESMTP id 6A64243D62 for ; Tue, 24 Aug 2004 04:21:23 +0000 (GMT) (envelope-from ababurko@adelphia.net) Received: from ample.adelphia.net ([24.52.224.96]) by mta13.adelphia.net (InterMail vM.6.01.03.02 201-2131-111-104-20040324) with ESMTP id <20040824042122.WWAJ24693.mta13.adelphia.net@ample.adelphia.net> for ; Tue, 24 Aug 2004 00:21:22 -0400 Message-Id: <5.2.1.1.0.20040824002044.00aded88@mail.dc2.adelphia.net> X-Sender: ababurko@mail.dc2.adelphia.net X-Mailer: QUALCOMM Windows Eudora Version 5.2.1 Date: Tue, 24 Aug 2004 00:21:22 -0400 To: freebsd-net@freebsd.org From: Bob Ababurko Mime-Version: 1.0 Content-Type: text/plain; charset="us-ascii"; format=flowed Subject: portscan looks like..... X-BeenThere: freebsd-net@freebsd.org X-Mailman-Version: 2.1.1 Precedence: list List-Id: Networking and TCP/IP with FreeBSD List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 24 Aug 2004 04:21:24 -0000 Hello- I have just done a portscan on my FreeBSD box running 5.2.1 and got : PORT STATE SERVICE 22/tcp open ssh 25/tcp open smtp 80/tcp open http 111/tcp open rpcbind 1023/tcp open netvenuechat now, i made a faux pas when i configured this machine and had made this a nfs client...i belive that was the case. I am now interested in turning this off, and will be able to do that with rpcbind_enable="NO" in rc.conf. Then there is the case of the port 1023. I have no idea how to turn this off or how it got turned on. Could the rpcbind allowed someone into my computer to hack it up? I am pretty scared at this point. Can somone help me? thanks, Bob