Date: Thu, 13 Nov 2003 11:12:10 -0700 From: "Dmitry S. Makovey" <dmitry@athabascau.ca> To: freebsd-security@freebsd.org Subject: What could be on udp:48152 Message-ID: <200311131112.18246.dmitry@athabascau.ca>
next in thread | raw e-mail | index | archive | help
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hi, I'm running stock FreeBSD with services running: samba (connectio= ns=20 allowed only from local network), lpd (same), bind (all interfaces), = apache=20 (all), zope (local) This machine is home gateway/http/printserver. Recently some strange things happened as my printer all of sudden sta= rted to=20 print stuff when nobody prints... luckily (or unluckily) it ran out o= f ink so=20 I can't tell what's printed. Checked programs running, ports opened a= nd found=20 one unidentified: udp4 0 0 *.49152 *.* dimon@gateway ~ > sockstat | grep 49152 bind named 270 4 udp4 *:49152 *:* Now', is there any reason for bind to use this port? Googling for that subject didn't bring any results other than usualy = this port=20 is first available for dynamic ports. Which doesn't make sence to me. System: FreeBSD 5.1 - --=20 Dmitry Makovey Web Systems Administrator Athabasca University (780) 675-6245 -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.2.3 (FreeBSD) iD8DBQE/s8mAyDrVuGfS98QRAlo6AJ9Miz8bbYjkldiTvSGOd+LfwY/3CACcCQAj eNMb97scSLfQDvoHE6nx+L8=3D =3Dp4RL -----END PGP SIGNATURE-----
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?200311131112.18246.dmitry>