From owner-freebsd-security Wed Sep 19 9:54:35 2001 Delivered-To: freebsd-security@freebsd.org Received: from poontang.schulte.org (poontang.schulte.org [209.134.156.197]) by hub.freebsd.org (Postfix) with ESMTP id 3F64337B411 for ; Wed, 19 Sep 2001 09:54:33 -0700 (PDT) Received: from schulte-laptop.schulte.org (nb-65.netbriefings.com [209.134.134.65]) by poontang.schulte.org (Postfix) with ESMTP id 437A7D14B0; Wed, 19 Sep 2001 11:54:31 -0500 (CDT) Message-Id: <5.1.0.14.0.20010919115220.03e6d2d0@pop.schulte.org> X-Sender: schulte@pop.schulte.org X-Mailer: QUALCOMM Windows Eudora Version 5.1 Date: Wed, 19 Sep 2001 11:53:38 -0500 To: "Nuno Teixeira" , From: Christopher Schulte Subject: Re: port 1023: listen In-Reply-To: <00cf01c1412b$7ecc4540$0a00a8c0@qnuno> Mime-Version: 1.0 Content-Type: text/plain; charset="us-ascii"; format=flowed Sender: owner-freebsd-security@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.org Use sockstat or lsof to see what process is listening on 1023. At 05:52 PM 9/19/2001 +0100, Nuno Teixeira wrote: >Hello to all, > >Today I've run nmap to scan my server ports and I found a port that I >don't know (Well Known Ports: 0 to 1023) > >[nmap] >1023/tcp open unknown > >I login at the server I there it is again and netstat shows: > >[netstat -n] >tcp4 0 0 *.1023 *.* LISTEN > > >Could my server be in security problems? >What service or program open this port and how do I turn it off? To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-security" in the body of the message