RE: Open ports after install..
Nevermind all, turns out this is an acl on our campus switch to block that sql worm. Cheers, Eric -Original Message- From: Eric Six [mailto:[EMAIL PROTECTED]] Sent: Tuesday, February 11, 2003 1:40 PM To: '[EMAIL PROTECTED]' Subject: Open ports after install.. I just installed 5.0AXP and am locking it down a bit and I have two open ports I cannot figure out what they are: Port State Service 22/tcp openssh 1433/tcp filteredms-sql-s 1434/tcp filteredms-sql-m # netstat -a Active Internet connections (including servers) Proto Recv-Q Send-Q Local Address Foreign Address(state) tcp4 0 0 brennans.ssh esix.dra.com.2790 ESTABLISHED tcp4 0 0 localhost.smtp *.*CLOSED tcp4 0 0 *.ssh *.*LISTEN tcp6 0 0 *.ssh *.*LISTEN udp4 0 0 *.syslog *.* udp6 0 0 *.syslog *.* Active UNIX domain sockets Address Type Recv-Q Send-QInode Conn Refs Nextref Addr fc001235d518 stream 0 00 fc001235d5e00 0 fc001235d5e0 stream 0 00 fc001235d5180 0 fc001235dc20 dgram 0 00 fc0012bde0000 fc001235dce8 fc001235dce8 dgram 0 00 fc0012bde0000 0 fc0012bde000 dgram 0 0 fc001294e0000 fc001235dc200 /var/run/log No sql on this box.. I am stumped... Eric To Unsubscribe: send mail to [EMAIL PROTECTED] with unsubscribe freebsd-questions in the body of the message To Unsubscribe: send mail to [EMAIL PROTECTED] with unsubscribe freebsd-questions in the body of the message
Re: Open ports after install..
On Tue, 11 Feb 2003 13:40:23 -0600 Eric Six [EMAIL PROTECTED] wrote: Howdy, I just installed 5.0AXP and am locking it down a bit and I have two open ports I cannot figure out what they are: Port State Service 22/tcp openssh 1433/tcp filteredms-sql-s 1434/tcp filteredms-sql-m No sql on this box.. I am stumped... Is that a remote nmap? Could very well be your ISP filtering those out to prevent spreading of the SQL worm. Note they are filtered. Cheers, -- Miguel Mendez - [EMAIL PROTECTED] GPG Public Key :: http://energyhq.homeip.net/files/pubkey.txt EnergyHQ :: http://www.energyhq.tk Of course it runs NetBSD! msg18897/pgp0.pgp Description: PGP signature
RE: Open ports after install..
Ports 1433 and 1434 should be blocked anyway! You are correct indeed Miguel THAT was the little Sapphire bugger that tanked part of the 'net recently Regards, -Colin + + On Tue, 11 Feb 2003 13:40:23 -0600 + Eric Six [EMAIL PROTECTED] wrote: + + Howdy, + + I just installed 5.0AXP and am locking it down a bit and I have two + open ports I cannot figure out what they are: + + Port State Service + 22/tcp openssh + 1433/tcp filteredms-sql-s + 1434/tcp filteredms-sql-m + + No sql on this box.. I am stumped... + + Is that a remote nmap? Could very well be your ISP filtering + those out + to prevent spreading of the SQL worm. Note they are filtered. To Unsubscribe: send mail to [EMAIL PROTECTED] with unsubscribe freebsd-questions in the body of the message