Hi:
I'm still fighting with open ports on my web server, W2K. I have
created TCP/IP filters to only let in 25,53, and 80. Yet NMAP shows the
following ports open.
Port State Service
25/tcp open smtp
53/tcp open domain
80/tcp open http
389/tcp open ldap <- issue #1
1002/tcp open unknown <- issue #2
What I have done:
Run TCPView - does not show either of these ports open
Run Fport - does not show either of these ports open
Run Netstat - does not show either of these ports open
Telnet to these ports, I get the following:
bash-2.04$ telnet myhost.com 389
Trying 64.231.73.171...
Connected to myhost.com.
Escape character is '^]'.
Connection closed by foreign host.
bash-2.04$ telnet myhost.com 1002
Trying 64.231.73.171...
Connected to myhost.com.
Escape character is '^]'.
Connection closed by foreign host.
bash-2.04$
Port 389 is the LDAP port but this server does not run Active Directory.
Port 1002 is unknown.
Question: Does anyone know of any other way to identify what services have
these ports open?
Thanks
Don
-
[To unsubscribe, send mail to [EMAIL PROTECTED] with
"unsubscribe firewalls" in the body of the message.]
