Thanks for the info. I'm assuming that the sendmail daemon is the one
that open this port, right? And assuming that I don't actually need
sendmail running, that eliminates two more ports for possible abuse.
As to Richard's question about ax25, no I don't run those utilities, but
thanks for the suggestion anyway.
Now my only question is the listen on 1025. From what I've been seeing,
this could be anything from bind to blackjack to realplayer. Is there a
real need to be concerned about this port?
Thanks again,
Wayne
Tompson Hayner wrote:
>
> Submission on Port 587 is reserved for email message submission as
> specified in this url http://www.landfield.com/rfcs/rfc2476.html. Messages
> received on this port are defined to be submissions. The protocol used is
> ESMTP [SMTP-MTA, ESMTP], with additional restrictions as specified here.
> It's used for ESMTP (considered a better choice than port 25 in most
> instances - a lot of SMTP servers use both). Of course, note that the fact
> that it says the service is submission means online that this is what the
> IANA has reserved this port for so for maximum security be skeptical.
>
> Thompson
>
> -----Original Message-----
> Port State Service
> 25/tcp open smtp
> 587/tcp open submission
> 631/tcp open unknown
> 1025/tcp open listen
> 6000/tcp open X11
