Re: [SLUG] nmap and ID'ing open ports

From: Bryan-TheBS-Smith (b.j.smith@ieee.org)
Date: Sun Sep 09 2001 - 14:19:37 EDT


Russell Hires wrote:
> Starting nmap V. 2.54BETA22 ( www.insecure.org/nmap/ )
> Interesting ports on poet (127.0.0.1):
> (The 64508 ports scanned but not shown below are in state: closed)
> Port State Service
> 3059/tcp open unknown
> 5432/tcp open postgres
> 8021/tcp open unknown

8021 -- that looks like the default port for Zope's Medusa FTP
service. You can disable it in the Zope startup script (should be
under /var/zope in most distros).

Most firewalls allow access to ports >1024 for compatibility.
Although even simple "stateless" firewalls should be denying TCP
packets with the SYN (service request) flag set. What firewall are
you using? Linux or black box?

> 9673/tcp open unknown

Damn that sounds familar.

-- TheBS

-- 
Bryan "TheBS" Smith    mailto:b.j.smith@ieee.org    chat:thebs413
Engineer   AbsoluteValue Systems, Inc.  http://www.linux-wlan.org
President    SmithConcepts, Inc.     http://www.SmithConcepts.com



This archive was generated by hypermail 2.1.3 : Fri Aug 01 2014 - 18:58:06 EDT