From owner-freebsd-security Sat Sep 4 4:30:55 1999 Delivered-To: freebsd-security@freebsd.org Received: from hotmail.com (f151.hotmail.com [207.82.251.30]) by hub.freebsd.org (Postfix) with SMTP id 7CED21518B for ; Sat, 4 Sep 1999 04:30:54 -0700 (PDT) (envelope-from madrapour@hotmail.com) Received: (qmail 43008 invoked by uid 0); 4 Sep 1999 11:28:55 -0000 Message-ID: <19990904112855.43007.qmail@hotmail.com> Received: from 195.96.144.201 by www.hotmail.com with HTTP; Sat, 04 Sep 1999 04:28:53 PDT X-Originating-IP: [195.96.144.201] From: "N. N.M" To: freebsd-security@freebsd.org Subject: Tracing open ports on FreeBSD Date: Sat, 04 Sep 1999 04:28:53 PDT Mime-Version: 1.0 Content-Type: text/plain; format=flowed Sender: owner-freebsd-security@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.org Hi, 1) I realized that the TCP ports of 6010,6011,6012 and 6013 are openly listening on my FreeBSD box. I don't know how this has happened, as they were not open before. They are related to X11 as far as I know. But I had already disabled XDM in /etc/ttys file. Could anybody tell me how I can disable this stuff? Or how they could get opened and listening? 2) This is some time that two UDP ports have got opened as well. Again, I don't have any idea on how they have got enabled. The ports are 1352 and 2699. Generally, how I can trace when a port gets suddenly enabled? thanks very much, Nazila N. ______________________________________________________ Get Your Private, Free Email at http://www.hotmail.com To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-security" in the body of the message