TO UNSUBSCRIBE: email "unsubscribe issforum" in the body of your message to
[EMAIL PROTECTED] Contact [EMAIL PROTECTED] for help with any problems!
----------------------------------------------------------------------------
>I have an NT 4.0 SP6a server with WINS and DHCP running. When
>performing a open port scan I noticed port 1032 open. I am
>wondering if anyone is aware
>of what this port is used for and why it would be open.
Port 1032 is in the range (1024 and up) that Windows NT usually uses for
dynamically assigned ports. If a server listens on a port but does not care
what port number it uses, it would get one of those port numbers.
Often on a Windows box these are Microsoft RPC/DCOM services. Since the
clients use the port mapper (port 135) to find the service, it does not need
to reside on a fixed port number. (This is similar to how Sun RPC services
work, though they use a different underlying protocol and a different port
mapper port, number 111).
For example, if you port scan an Exchange server, there are a number of
ports in this range which will be listening, this is where the Exchange
clients send their RPC requests to interact with the Exchange server.
In your case, this might be a channel used to administer the WINS and/or
DHCP servers remotely. Just as an experiment I just port scanned the WINS
server we use here and it also has port 1032 open. This also seems to be
confirmed by the text in this article, which will also tell you how to
configure it to use a different port if you wish:
Configuring RPC Dynamic Port Allocation to Work With Firewall
http://support.microsoft.com/support/kb/articles/Q154/5/96.ASP
Hope that helps.
=====================================
MY PHONE NUMBERS HAVE CHANGED! PLEASE MAKE NOTE OF THE NEW ONES BELOW.
=====================================
Tim Farley
X-Force Researcher
Internet Security Systems
[EMAIL PROTECTED]
(404) 236-2600 / Direct Dial (404) 236-2873 / fax (404) 236-2624
http://www.iss.net
Internet Security Systems - The Power to Protect
=====================================
