-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hey all. I'm seeing odd results when I portscan my server from a remote host. nmap is indicating that port 98 (the dreaded linuxconf port) is in a filtered state. I have never ever ever installed linuxconf. I know my ipchains rules have nothing to do with this, as I just flushed all the rules, tried the portscan again, and saw the same results.
fuser does not show any process listening on port 98. I built a new fuser executable from trusted source (the Debian potato sources, freshly downloaded) and still saw nothing on that port. telnetting to that port from a remote host hangs while trying to establish the connection. telnetting from the localhost gives a connection refused message. I doubt it's a sign that the box has been cracked, but I suppose it's conceivable. I'm stumped. Can anybody offer an explanation? thanks. noah - -- _______________________________________________________ | Web: http://web.morgul.net/~frodo/ | PGP Public Key: http://web.morgul.net/~frodo/mail.html -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.0.1 (GNU/Linux) Comment: For info see http://www.gnupg.org iD8DBQE550gUYrVLjBFATsMRAnwzAJ45sAqSxILAsFGbbGP0irTDnA1UJgCfZn+q nftEvU5XYBKfv//kJyRJFMI= =05gt -----END PGP SIGNATURE-----
