Re: [gentoo-user] Open ports question

2003-03-14 Thread Paul de Vrieze
On Friday 14 March 2003 01:24, leeweiqi wrote: Yup, starting portmap opens port 111/tcp. should i block this port using iptables? Yes, you should. In general there is no reason to support remote access to the portmapper. (That is unless you really wish to offer nis/yp or nfs to the outside

Re: [gentoo-user] Open ports question

2003-03-14 Thread Corey Melanson
I'm also have sympatico and run a mail server. What they have done as far as I know is blocked all outgoing smtp unless it's going through their servers. What you can do to cope with this is to set your mail server to relay through the smtp server they assigned you, smtp1.sympatico.ca for me.

Re: [gentoo-user] Open ports question

2003-03-14 Thread Nicholas Hockey
try this as root: lsof | grep -i listen then yell have the names of the processes opening certain ports On Thu, 2003-03-13 at 09:40, Pius Lee wrote: Hi, I recently used nmap to portscan my machine from another pc and found that i've got the following ports open: 22 (ssh) 25 (smtp) 113

[gentoo-user] Open ports question

2003-03-13 Thread Pius Lee
Hi, I recently used nmap to portscan my machine from another pc and found that i've got the following ports open: 22 (ssh) 25 (smtp) 113 (pop-3) Now, I'm very sure that I only started the sshd daemon and I DON'T even have an smtp/pop3/any kind of mail server installed. Running netstat -l -p

Re: [gentoo-user] Open ports question

2003-03-13 Thread Arturo di Gioia
On Thu, 2003-03-13 at 15:40, Pius Lee wrote: Hi, I recently used nmap to portscan my machine from another pc and found that i've got the following ports open: 22 (ssh) 25 (smtp) 113 (pop-3) Stop your network interface and watch which services are automatically stopped. Restarting

Re: [gentoo-user] Open ports question

2003-03-13 Thread Pius Lee
I'm not too sure bout that...how can I find out? Sounds evil... Paul de Vrieze wrote: On Thursday 13 March 2003 15:40, Pius Lee wrote: Hi, I recently used nmap to portscan my machine from another pc and found that i've got the following ports open: 22 (ssh) 25 (smtp) 113 (pop-3) Are you

Re: [gentoo-user] Open ports question

2003-03-13 Thread mikepolniak
On 22:40 Thu 13 Mar , Pius Lee wrote: Hi, I recently used nmap to portscan my machine from another pc and found that i've got the following ports open: 22 (ssh) 25 (smtp) 113 (pop-3) Now, I'm very sure that I only started the sshd daemon and I DON'T even have an smtp/pop3/any kind

Re: [gentoo-user] Open ports question

2003-03-13 Thread Paul de Vrieze
On Thursday 13 March 2003 15:56, Pius Lee wrote: I'm not too sure bout that...how can I find out? Sounds evil... Just try to telnet to your host on those ports from an outside machine. Paul -- Paul de Vrieze Researcher Mail: [EMAIL PROTECTED] Homepage: http://www.devrieze.net pgp0.pgp

Re: [gentoo-user] Open ports question

2003-03-13 Thread Spider
begin quote On Thu, 13 Mar 2003 22:40:25 +0800 Pius Lee [EMAIL PROTECTED] wrote: use lsof -i instead of nmap and you can know what it is that does what, instead of knowing something is open. but, fam (file alteration monitor) speeds up the listing of files + updates of them if you have KDE or

Re: [gentoo-user] Open ports question

2003-03-13 Thread leeweiqi
Ok, I tried again today. now nmap from a remote pc gives: Port State Service 22/tcp openssh 25/tcp filteredsmtp No more port 113! And what does the filtered mean? lsof|grep LISTEN gives: sshd 5586 root3u IPv4 7621 TCP *:ssh

Re: [gentoo-user] Open ports question

2003-03-13 Thread leeweiqi
Yup, starting portmap opens port 111/tcp. should i block this port using iptables? --- Spider [EMAIL PROTECTED] wrote: begin quote On Thu, 13 Mar 2003 22:40:25 +0800 Pius Lee [EMAIL PROTECTED] wrote: use lsof -i instead of nmap and you can know what it is that does what, instead of

Re: [gentoo-user] Open ports question

2003-03-13 Thread leeweiqi
Ok...telnetting from a outside machine (210.193.25.172 is my host ip): [EMAIL PROTECTED] sysconfig]# telnet 210.193.25.172 25 Trying 210.193.25.172... telnet: connect to address 210.193.25.172: No route to host Does that mean no one can connect to port 25 on my machine then? --- Paul de Vrieze

Re: [gentoo-user] Open ports question

2003-03-13 Thread Sean Higgins
Hello, I tried telnetting and here is what I got: $ telnet 210.193.25.172 25 Trying 210.193.25.172... Connected to 210.193.25.172. Escape character is '^]'. 220 tomts15.bellnexxia.net ESMTP server (InterMail vM.5.01.04.19 201-253-122-122-119-20020516) ready Thu, 13 Mar 2003 20:25:05 -0500 quit

Re: [gentoo-user] Open ports question

2003-03-13 Thread leeweiqi
So, does that mean that the port is not open by me but rather it's my isp who opened the port? Would this be a security breach on my machine? Thanks for everyone's help man. --- Sean Higgins [EMAIL PROTECTED] wrote: Hello, I tried telnetting and here is what I got: $ telnet

Re: [gentoo-user] Open ports question

2003-03-13 Thread Norberto BENSA
On Thursday 13 March 2003 10:53 pm, leeweiqi wrote: So, does that mean that the port is not open by me but rather it's my isp who opened the port? Would this be a security breach on my machine? Thanks for everyone's help man. No security risk, but you can't run your own stmp server either,

Re: [gentoo-user] Open ports question

2003-03-13 Thread leeweiqi
Haha. ok, just glad that it's not a breach in my system security. --- Norberto BENSA [EMAIL PROTECTED] wrote: On Thursday 13 March 2003 10:53 pm, leeweiqi wrote: So, does that mean that the port is not open by me but rather it's my isp who opened the port? Would this be a security breach