Skip site navigation (1)Skip section navigation (2)
Date:      Thu, 29 Jun 2000 13:48:08 -0700
From:      Alfred Perlstein <bright@wintelcom.net>
To:        Hank Wethington <bsd@info-logix.com>
Cc:        BSD <freebsd-questions@FreeBSD.ORG>
Subject:   Re: open ports question
Message-ID:  <20000629134807.V275@fw.wintelcom.net>
In-Reply-To: <KFEIIDCJNHBCGLAFNMJICEIOCGAA.bsd@info-logix.com>; from bsd@info-logix.com on Thu, Jun 29, 2000 at 01:40:46PM -0700
References:  <20000629131811.U275@fw.wintelcom.net> <KFEIIDCJNHBCGLAFNMJICEIOCGAA.bsd@info-logix.com>

next in thread | previous in thread | raw e-mail | index | archive | help
* Hank Wethington <bsd@info-logix.com> [000629 13:41] wrote:
> The inetd.conf file was edited over 3 months ago, the machine has had many
> reboots since then.
> 
> Forgive me for being hesitant about listing open ports. I have security for
> port scans but direct access to a port. If there is a know exploit it can't
> be stopped if I'm not looking on.
> 
> the ones I currently have open are:
> 
> 79 Finger
> 111 Portmapper (in rc.conf I have portmap_enable="NO" so why is this coming
> up?)
> 119 NNTP which is not running as the machine is not acting as a news server
> 143 IMAP, again not running that I know of
> 540 UUCP
> 1024 ???
> 
> and a few others. I can block all of them with my fire wall rules, but I'm
> wondering why they're open in the first place.

what does 'ps -ax' show?  Are you sure you haven't installed stuff
that's running out of /usr/local/etc/rc.d that may be binding to
these ports?

how are you determining that these ports are in fact open?

-Alfred


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-questions" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20000629134807.V275>