Re: What could be on udp:48152

From: James Raftery (james_at_kerna.ie)
Date: 11/13/03

  • Next message: Mike Silbersack: "Re: What could be on udp:48152" 
    Date: Thu, 13 Nov 2003 18:20:48 +0000
To: freebsd-security@freebsd.org

    On Thu, Nov 13, 2003 at 11:12:10AM -0700, Dmitry S. Makovey wrote:
    > dimon@gateway ~ > sockstat | grep 49152
    > bind named 270 4 udp4 *:49152 *:*
    >
    > Now', is there any reason for bind to use this port? Googling for
    > that subject didn't bring any results other than usualy this port is
    > first available for dynamic ports. Which doesn't make sence to me.

    It's the port it uses for sysqueries. You can tell named to use a specific
    port using the query-source option.

    ATB,
    james
    _______________________________________________
    freebsd-security@freebsd.org mailing list
    http://lists.freebsd.org/mailman/listinfo/freebsd-security
    To unsubscribe, send any mail to "freebsd-security-unsubscribe@freebsd.org"

  • Next message: Mike Silbersack: "Re: What could be on udp:48152"

    Relevant Pages

    • Re: Bird Flu - Scotland
      ... what was Britain's fastest growing port. ... Have you got your poultry in yet? ... No reason to do that yet as you would know if you had the smallest clue. ... Jill claims to run a business - and one with considerable ...
      (uk.business.agriculture)
    • Re: false portscan alarm
      ... What is the reason of that treffic? ... and the browser and/or the "personal firewall" had decided to close those ... which each have a local source port above 1024 opened outgoing to port 80 ... I've had a dig through my own PIX logs, and while there is nothing for today ...
      (comp.security.firewalls)
    • Re: false portscan alarm
      ... What is the reason of that treffic? ... which each have a local source port above 1024 opened outgoing to port 80 ... Windows Messenger? ... UDP packets from that IP have been MSN/Windows messenger spam (which is ...
      (comp.security.firewalls)
    • Re: Craigslist Bouncing Me - Non-generic DNS
      ... You do not need to use TCP source port 25, but you do need TCP destination port 25. ... It is systems that have become infected with a worm / virus of some sort that has its own SMTP engine in it that is sending the majority of the spam. ... The only reason I mentioned the mail servers is so that they people running them, be it hobbyist or businesses, could state that they will take responsibility for their systems and to request bypassing of the default outgoing destination port 25 block. ...
      (comp.mail.sendmail)
    • Re: "Dont panic"?
      ... have some other legitimate reason for scanning your network. ... While port scanning is a waste ... > cyberworld is fraught with danger. ... a port scan reports back to an ISP a lot of people time and network bandwidth ...
      (comp.security.ssh)