Date: Thu, 13 Nov 2003 11:12:10 -0700 From: "Dmitry S. Makovey" <dmitry@athabascau.ca> To: freebsd-security@freebsd.org Subject: What could be on udp:48152 Message-ID: <200311131112.18246.dmitry@athabascau.ca>
next in thread | raw e-mail | index | archive | help
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hi, I'm running stock FreeBSD with services running: samba (connections allowed only from local network), lpd (same), bind (all interfaces), apache (all), zope (local) This machine is home gateway/http/printserver. Recently some strange things happened as my printer all of sudden started to print stuff when nobody prints... luckily (or unluckily) it ran out of ink so I can't tell what's printed. Checked programs running, ports opened and found one unidentified: udp4 0 0 *.49152 *.* dimon@gateway ~ > sockstat | grep 49152 bind named 270 4 udp4 *:49152 *:* Now', is there any reason for bind to use this port? Googling for that subject didn't bring any results other than usualy this port is first available for dynamic ports. Which doesn't make sence to me. System: FreeBSD 5.1 - -- Dmitry Makovey Web Systems Administrator Athabasca University (780) 675-6245 -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.2.3 (FreeBSD) iD8DBQE/s8mAyDrVuGfS98QRAlo6AJ9Miz8bbYjkldiTvSGOd+LfwY/3CACcCQAj eNMb97scSLfQDvoHE6nx+L8= =p4RL -----END PGP SIGNATURE-----
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?200311131112.18246.dmitry>