Re: [fw-wiz] Port 37628....Is it just another port or out of theextra ordinary???

From: Kerry Thompson (kez_at_crypt.gen.nz)
Date: 07/22/04

  • Next message: Julian Gomez: "Re: [fw-wiz] iso 17799"
    To: firewall-wizards@honor.icsalabs.com
    Date: Fri, 23 Jul 2004 09:18:20 +1200 (NZST)
    
    

    Chuck Swiger said:
    > InHisGrip wrote:
    > [ ... ]
    >
    > To answer the subject, rumor has it that port 37628 is used by the nfslock
    > service on some common Linux platforms (ie, Redhat). It's probably that
    > or
    > some other RPC-based service, considering that port 111 also open.
    >
    > [snip]

    Note that 37628 in the subject line is a typo, from the original post
    netstat the port was 32768 ( ie. 2^15 ).

    tcp/32768 is usually rpc.statd, so try closing down nfs ( RedHat/Fedora
    run 'service nfs stop' ) and see if it goes away.

    Kerry

    -- 
    Kerry Thompson
    IT Security Consultant
    http://www.crypt.gen.nz
    _______________________________________________
    firewall-wizards mailing list
    firewall-wizards@honor.icsalabs.com
    http://honor.icsalabs.com/mailman/listinfo/firewall-wizards
    

  • Next message: Julian Gomez: "Re: [fw-wiz] iso 17799"

    Relevant Pages

    • Re: Port 1080
      ... Port 1080 is a Socks Proxy port, on that note if you server is a Redhat ... before from the Redhat 7.3 and 8.0 distros trying to contact RHN ...
      (Incidents)
    • Re: remote printing to windows -- 2nd post
      ... > I have redhat 7.3 and trying to print to a hp printer directly through ... > tcp or through a windows print server. ... Port 9100 is used by HP's Jetdirect ... When in doubt, restart cups or lpd, depending upon which one your system ...
      (comp.os.linux)
    • Re: d3/linux to hp jetdirect print server
      ... > direct to port 9100, and out came the results ... ... Hang on to all your old Redhat linux install media; ... I notice you can no longer download old copies of redhat; ...
      (comp.databases.pick)
    • Re: Apache access_log data. Hack?
      ... Bit Twister wrote: ... >>I'm running Apache on a Redhat 7.1 box for personal use. ... Is this a port scan? ...
      (comp.os.linux.security)
    • RedHat 9 and Net-SNMP: Timeout
      ... I installed Net-SNMP 5.0.9 on my RedHat 9 PC. ... PORT STATE SERVICE ... 161/udp closed snmp ...
      (linux.redhat)