Skip site navigation (1)Skip section navigation (2)
Date:      Mon, 9 Aug 2004 08:18:18 +0200
From:      Zoran Kolic <kolicz@eunet.yu>
To:        larry price <laprice@gmail.com>
Cc:        freebsd-security@freebsd.org
Subject:   Re: about nmap
Message-ID:  <20040809061818.GA634@kolic.net>
In-Reply-To: <a992d1e5040808111970de2d93@mail.gmail.com>
References:  <20040808053526.GA652@kolic.net> <a992d1e5040808111970de2d93@mail.gmail.com>

next in thread | previous in thread | raw e-mail | index | archive | help
Thanx all for reply.

> Got BIND running? BIND usually likes to have a random TCP port bound. Mine
> seems to be inclined to hang around in the 3xxx range, though.

No, I don't have it.

> nmap itself?

Why only in userland? X? Could be my old and
cheap comp. BTW, 3.48.

> what does sockstat -p <portnumber> tell you?

port 25 (ipfw2 dynamic rules)
port 2628 dictd (server for dictionaries)
port 514 syslogd in udp (no rule to access
from outside)

> Ftp perhaps?

No, just a workstation.

When I find something open and check
it again, it is closed. And... cannot
close "syslogd" for report issues. Is
it what everyone have open on udp 514?
Nothing suspected in conf.

Best regards.

                ZK




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20040809061818.GA634>