The RPCSS.EXE fires up an undocumented TCP-listener on one of the high
ports, usually tcp 1027 and netstat shows up on 1028. As far as I know
there isn't a way to shut off either of these.
> -----Original Message-----
> From: Houser David DW [SMTP:[EMAIL PROTECTED]]
> Sent: Thursday, June 17, 1999 11:17 AM
> To: [EMAIL PROTECTED]
> Subject: This is **NOT** Why not NT... NT Services
>
> Not wanting to start/continue the religious argument, and with my sincere
> sympathies to Brian_Steele but I've just inherited partial ownership of an
> MS Proxy Server that connects through a screwed down Packet Filter to the
> Internet. Unfortunately, the Proxy Server is a bit less secure than I'd
> like (note, this is not totally because it's an NT based system, huh-unh,
> no
> way does that matter to an open-minded guy like me...) and I see some open
> ports that I don't like.
>
> Is there an easy way to map open Ports to running Services on an NT box?
> These ports are not included in the \etc\services file under
> windows\system32\..., and I'm just plain stumped as to what's running on
> them,and whether it may be a problem. How do I determine what services
> may
> be running on these ports? (Have tried a Telnet, is either CONNECTION
> REFUSED, or a very generic CONNECTED TO ip addr ... CONNECTION CLOSED).
>
> Thanks,
> DWH
> -
> [To unsubscribe, send mail to [EMAIL PROTECTED] with
> "unsubscribe firewalls" in the body of the message.]
-
[To unsubscribe, send mail to [EMAIL PROTECTED] with
"unsubscribe firewalls" in the body of the message.]
