From owner-freebsd-security Sun Sep 5 19:35:18 1999 Delivered-To: freebsd-security@freebsd.org Received: from rover.village.org (rover.village.org [204.144.255.49]) by hub.freebsd.org (Postfix) with ESMTP id 7702F1580D for ; Sun, 5 Sep 1999 19:35:15 -0700 (PDT) (envelope-from imp@harmony.village.org) Received: from harmony.village.org (harmony.village.org [10.0.0.6]) by rover.village.org (8.9.3/8.9.3) with ESMTP id UAA33065; Sun, 5 Sep 1999 20:34:56 -0600 (MDT) (envelope-from imp@harmony.village.org) Received: from harmony.village.org (localhost.village.org [127.0.0.1]) by harmony.village.org (8.9.3/8.8.3) with ESMTP id UAA01490; Sun, 5 Sep 1999 20:34:03 -0600 (MDT) Message-Id: <199909060234.UAA01490@harmony.village.org> To: "N. N.M" Subject: Re: Tracing open ports on FreeBSD Cc: freebsd-security@FreeBSD.ORG In-reply-to: Your message of "Sat, 04 Sep 1999 04:28:53 PDT." <19990904112855.43007.qmail@hotmail.com> References: <19990904112855.43007.qmail@hotmail.com> Date: Sun, 05 Sep 1999 20:34:03 -0600 From: Warner Losh Sender: owner-freebsd-security@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.org In message <19990904112855.43007.qmail@hotmail.com> "N. N.M" writes: : 1) I realized that the TCP ports of 6010,6011,6012 and 6013 are openly : listening on my FreeBSD box. I don't know how this has happened, as they : were not open before. They are related to X11 as far as I know. But I had : already disabled XDM in /etc/ttys file. Could anybody tell me how I can : disable this stuff? Or how they could get opened and listening? ssh will create these. : 2) This is some time that two UDP ports have got opened as well. Again, I : don't have any idea on how they have got enabled. The ports are 1352 and : 2699. Generally, how I can trace when a port gets suddenly enabled? That I can't help you with. Warner To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-security" in the body of the message