From owner-freebsd-questions Fri Dec 14 1: 5:25 2001 Delivered-To: freebsd-questions@freebsd.org Received: from harrier.prod.itd.earthlink.net (harrier.mail.pas.earthlink.net [207.217.120.12]) by hub.freebsd.org (Postfix) with ESMTP id 202C337B405 for ; Fri, 14 Dec 2001 01:05:17 -0800 (PST) Received: from dialup-209.245.140.14.dial1.sanjose1.level3.net ([209.245.140.14] helo=gohan.cjclark.org) by harrier.prod.itd.earthlink.net with esmtp (Exim 3.33 #1) id 16EoHI-0003wf-00; Fri, 14 Dec 2001 01:05:12 -0800 Received: (from cjc@localhost) by gohan.cjclark.org (8.11.6/8.11.1) id fBCNrwf02724; Wed, 12 Dec 2001 15:53:58 -0800 (PST) (envelope-from cjc) Date: Wed, 12 Dec 2001 15:53:57 -0800 From: "Crist J. Clark" To: Ronald Clark Cc: "Freebsd-Questions (E-mail)" Subject: Re: open ports Message-ID: <20011212155357.J487@gohan.cjclark.org> Reply-To: cjclark@alum.mit.edu References: Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline User-Agent: Mutt/1.2.5i In-Reply-To: ; from rclark@swbanktx.com on Wed, Dec 12, 2001 at 03:58:44PM -0600 X-URL: http://people.freebsd.org/~cjc/ Sender: owner-freebsd-questions@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.ORG On Wed, Dec 12, 2001 at 03:58:44PM -0600, Ronald Clark wrote: > Hello all, > > I have a question. I just ran an nmap scan against my FreeBSD 4.4 stable > box. It showed that udp port 1505 was open. I then ran netstat -a and the > 1505 port did not show up, either as ESTABLISHED or LISTEN. UDP ports don't have states, but that's another issue. > My /etc/services > file shows 1505 to be a Funk Proxy software package (makers of Steel Belted > Radius). Any ideas what this could be, and how to shut it off? If you run it again, is it still there? Most likely, some process (e.g. DNS or even nmap itself) was using 1505 as a source port when it was scanned. By the time you checked netstat(1), it was gone. -- Crist J. Clark cjclark@alum.mit.edu To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-questions" in the body of the message