[CentOS] Tracking Open Ports

2014-05-30 Thread Eric Falbe
Hi All, I was wondering if anyone knew of a way to notify or log when a specific remote port is openened? I have an old LDAP server that I am looking to get rid of, but there is still a few queries reaching it. The sytem authentication is setup correctly (as is Postfix), so I am thinking

Re: [CentOS] Tracking Open Ports

2014-05-30 Thread Brian Mathis
You could setup an iptables rule on the OUTPUT chain to log attempted accesses, then watch the log file, like outlined here: http://stackoverflow.com/questions/11584824/run-a-system-command-when-an-iptables-rule-is-matched You could use lsof -n ... to find the command trying to open the port.

Re: [CentOS] Tracking Open Ports

2014-05-30 Thread zep
On 05/30/2014 11:14 AM, Eric Falbe wrote: Hi All, I was wondering if anyone knew of a way to notify or log when a specific remote port is openened? I have an old LDAP server that I am looking to get rid of, but there is still a few queries reaching it. The sytem authentication is setup

Re: [CentOS] Tracking Open Ports

2014-05-30 Thread Les Mikesell
On Fri, May 30, 2014 at 10:14 AM, Eric Falbe ericf...@gmail.com wrote: Hi All, I was wondering if anyone knew of a way to notify or log when a specific remote port is openened? I have an old LDAP server that I am looking to get rid of, but there is still a few queries reaching it. The

Re: [CentOS] Tracking Open Ports

2014-05-30 Thread Eric Falbe
On 05/30, Les Mikesell wrote: On Fri, May 30, 2014 at 10:14 AM, Eric Falbe ericf...@gmail.com wrote: Hi All, I was wondering if anyone knew of a way to notify or log when a specific remote port is openened? I have an old LDAP server that I am looking to get rid of, but there is still

Re: [CentOS] Tracking Open Ports

2014-05-30 Thread Marcelo Ricardo Leitner
Em 30-05-2014 13:12, Eric Falbe escreveu: On 05/30, Les Mikesell wrote: On Fri, May 30, 2014 at 10:14 AM, Eric Falbe ericf...@gmail.com wrote: Hi All, I was wondering if anyone knew of a way to notify or log when a specific remote port is openened? I have an old LDAP server that I am

Re: [CentOS] Tracking Open Ports

2014-05-30 Thread Banyan
Hi Brian, You can enable iptables to track the network behavior. Best regards, Banyan Email: ban...@rootong.com Web: www.rootong.com On 5/30/2014 11:35 PM, Brian Mathis wrote: You could setup an iptables rule on the OUTPUT chain to log attempted accesses, then watch the log