TCP 12345 is also used by Trend OfficeScan to allow th central admin to pushnew sigs out. It boggles the mind why Trend decided to choose that port.
Go get yourself a copy of fport from http://www.foundstone.com. It works lile lsof, so you can find out exactly what process has what port one. Chris -----Original Message----- From: Wonn, Jason J--G2(Contractor) [mailto:[EMAIL PROTECTED]] Sent: Thursday, March 07, 2002 12:38 PM To: '[EMAIL PROTECTED]' Subject: RE: port 12345 windows95/nt Port 12345 is Netbus. Definitely want to block that. Not sure what Ivan meant by, don't block ports. I think that's exactly what you should do. That's one of the main functions of a firewall.
