RE: Open ports after install..

2003-02-11 Thread Eric Six
Nevermind all, turns out this is an acl on our campus switch to block that
sql worm.


Cheers,
Eric

-Original Message-
From: Eric Six [mailto:[EMAIL PROTECTED]]
Sent: Tuesday, February 11, 2003 1:40 PM
To: '[EMAIL PROTECTED]'
Subject: Open ports after install..


I just installed 5.0AXP and am locking it down a bit and I have two open
ports I cannot figure out what they are:

Port   State   Service
22/tcp openssh 
1433/tcp   filteredms-sql-s
1434/tcp   filteredms-sql-m 

# netstat -a
Active Internet connections (including servers)
Proto Recv-Q Send-Q  Local Address  Foreign Address(state)
tcp4   0  0  brennans.ssh   esix.dra.com.2790
ESTABLISHED
tcp4   0  0  localhost.smtp *.*CLOSED
tcp4   0  0  *.ssh  *.*LISTEN
tcp6   0  0  *.ssh  *.*LISTEN
udp4   0  0  *.syslog   *.*
udp6   0  0  *.syslog   *.*
Active UNIX domain sockets
Address  Type   Recv-Q Send-QInode Conn Refs  Nextref Addr
fc001235d518 stream  0  00 fc001235d5e00
0
fc001235d5e0 stream  0  00 fc001235d5180
0
fc001235dc20 dgram   0  00 fc0012bde0000
fc001235dce8
fc001235dce8 dgram   0  00 fc0012bde0000
0
fc0012bde000 dgram   0  0 fc001294e0000
fc001235dc200 /var/run/log



No sql on this box.. I am stumped...


Eric

To Unsubscribe: send mail to [EMAIL PROTECTED]
with unsubscribe freebsd-questions in the body of the message

To Unsubscribe: send mail to [EMAIL PROTECTED]
with unsubscribe freebsd-questions in the body of the message



Re: Open ports after install..

2003-02-11 Thread Miguel Mendez
On Tue, 11 Feb 2003 13:40:23 -0600
Eric Six [EMAIL PROTECTED] wrote:

Howdy,

 I just installed 5.0AXP and am locking it down a bit and I have two
 open ports I cannot figure out what they are:
 
 Port   State   Service
 22/tcp openssh 
 1433/tcp   filteredms-sql-s
 1434/tcp   filteredms-sql-m 

 No sql on this box.. I am stumped...

Is that a remote nmap? Could very well be your ISP filtering those out
to prevent spreading of the SQL worm. Note they are filtered.

Cheers,
-- 
Miguel Mendez - [EMAIL PROTECTED]
GPG Public Key :: http://energyhq.homeip.net/files/pubkey.txt
EnergyHQ :: http://www.energyhq.tk
Of course it runs NetBSD!



msg18897/pgp0.pgp
Description: PGP signature


RE: Open ports after install..

2003-02-11 Thread Colin J. Raven
Ports 1433 and 1434 should be blocked anyway! You are correct indeed
Miguel THAT was the little Sapphire bugger that tanked part of the
'net recently
Regards,
-Colin

+ 
+ On Tue, 11 Feb 2003 13:40:23 -0600
+ Eric Six [EMAIL PROTECTED] wrote:
+ 
+ Howdy,
+ 
+  I just installed 5.0AXP and am locking it down a bit and I have two
+  open ports I cannot figure out what they are:
+  
+  Port   State   Service
+  22/tcp openssh 
+  1433/tcp   filteredms-sql-s
+  1434/tcp   filteredms-sql-m 
+ 
+  No sql on this box.. I am stumped...
+ 
+ Is that a remote nmap? Could very well be your ISP filtering 
+ those out
+ to prevent spreading of the SQL worm. Note they are filtered.
 



To Unsubscribe: send mail to [EMAIL PROTECTED]
with unsubscribe freebsd-questions in the body of the message