From owner-freebsd-questions@FreeBSD.ORG Sat Feb 4 11:11:06 2006 Return-Path: X-Original-To: freebsd-questions@freebsd.org Delivered-To: freebsd-questions@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 05F8216A430 for ; Sat, 4 Feb 2006 11:11:06 +0000 (GMT) (envelope-from m.seaman@infracaninophile.co.uk) Received: from smtp.infracaninophile.co.uk (ns0.infracaninophile.co.uk [81.187.76.162]) by mx1.FreeBSD.org (Postfix) with ESMTP id 150E943D45 for ; Sat, 4 Feb 2006 11:11:04 +0000 (GMT) (envelope-from m.seaman@infracaninophile.co.uk) Received: from [IPv6:::1] (localhost [IPv6:::1]) by smtp.infracaninophile.co.uk (8.13.4/8.13.4) with ESMTP id k14BArKj008466; Sat, 4 Feb 2006 11:10:54 GMT (envelope-from m.seaman@infracaninophile.co.uk) Message-ID: <43E48BB8.7000906@infracaninophile.co.uk> Date: Sat, 04 Feb 2006 11:10:48 +0000 From: Matthew Seaman Organization: Infracaninophile User-Agent: Thunderbird 1.5 (X11/20060113) MIME-Version: 1.0 To: Bill Schoolcraft References: In-Reply-To: X-Enigmail-Version: 0.94.0.0 Content-Type: multipart/signed; micalg=pgp-ripemd160; protocol="application/pgp-signature"; boundary="------------enig8EAFBC459ACBA8C166A754FD" X-Greylist: Sender IP whitelisted, not delayed by milter-greylist-2.0.2 (smtp.infracaninophile.co.uk [IPv6:::1]); Sat, 04 Feb 2006 11:10:54 +0000 (GMT) X-Virus-Scanned: ClamAV 0.88/1275/Fri Feb 3 18:00:42 2006 on happy-idiot-talk.infracaninophile.co.uk X-Virus-Status: Clean X-Spam-Status: No, score=-3.0 required=5.0 tests=AWL,BAYES_00,NO_RELAYS autolearn=ham version=3.1.0 X-Spam-Checker-Version: SpamAssassin 3.1.0 (2005-09-13) on happy-idiot-talk.infracaninophile.co.uk Cc: freebsd-questions@freebsd.org Subject: Re: 6.0, allow remote logging? X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 04 Feb 2006 11:11:06 -0000 This is an OpenPGP/MIME signed message (RFC 2440 and 3156) --------------enig8EAFBC459ACBA8C166A754FD Content-Type: text/plain; charset=ISO-8859-15 Content-Transfer-Encoding: quoted-printable Bill Schoolcraft wrote: > But when I go to check an see if the external port 514/udp is open I > get nothing showing: >=20 > ############################################################# >=20 > [root@logserv ~]-> nmap localhost >=20 > (The 1660 ports scanned but not shown below are in state: closed) > PORT STATE SERVICE > 22/tcp open ssh > 25/tcp open smtp > 80/tcp open http >=20 > ############################################################# Umm... by default nmap only scans /TCP/ ports. syslog is a /UDP/ service= =2E Try sockstat(1) to see what network ports processes are listening on, and= use nmap like so to scan for UDP listeners: # nmap -sU -p U:1-8080 hostname Note that UDP scans intrinsically tend to take a lot longer than TCP scan= s -- the nmap(1) man page explains why -- so don't try scanning too many ports= at once, or you'll be waiting years for a result. Cheers, Matthew --=20 Dr Matthew J Seaman MA, D.Phil. 7 Priory Courtyard Flat 3 PGP: http://www.infracaninophile.co.uk/pgpkey Ramsgate Kent, CT11 9PW --------------enig8EAFBC459ACBA8C166A754FD Content-Type: application/pgp-signature; name="signature.asc" Content-Description: OpenPGP digital signature Content-Disposition: attachment; filename="signature.asc" -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.2 (FreeBSD) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iD8DBQFD5Iu98Mjk52CukIwRA04DAJ9CKW3aFyLBqiy8crDOnP4wpdvOLwCfc12r Gg04KKA1QH98hPt0LY0PLFY= =FXae -----END PGP SIGNATURE----- --------------enig8EAFBC459ACBA8C166A754FD--