Re: Keep connecting to remote host on port 7869

From: Luis Bruno (lbruno@zbit.pt)
Date: 10/26/02 

Date: Sat, 26 Oct 2002 09:30:47 +0000
From: Luis Bruno <lbruno@zbit.pt>
To: incidents@securityfocus.com

Frank Cheong wrote:
> My redhat linux mail host keeps connecting to other remote host quite
> frequently on remote port 7869.
> [snip]
> Below is the firewall log (IP address being modified) :
>
> 10/23/2002 11:13:36.640 - TCP connection dropped -
> Source:123.123.123.123, 51321, LAN -
> Destination:234.234.234.234, 7869, WAN - Type: 786 -
> Rule 66

If your frewall drops the connection thru a TCP RST, change it so that
it silently drops the packets. This will make the linux box hang waiting
for a timeout.

Then execute:

        netstat -tanp | grep <port>

on the linux box, where <port> is the source port you see in the Source:
line on your firewall logs.

----------------------------------------------------------------------------
This list is provided by the SecurityFocus ARIS analyzer service.
For more information on this free incident handling, management
and tracking system please see: http://aris.securityfocus.com

Relevant Pages

  • entry on firewall log
    ... I've noticed on my firewall log a couple of tcp connection attempts (from ... different IPs) with port 6000 as the source port on the remote host and port ...
    (Fedora)
  • Re: uCLinux on Samsung S3C4510B (ARM7TDMI) based wireless router
    ... serial port or printer port, ... linux or further. ... > router, access point and print server, all at the same time, preferably ... > and openap-ng) options as well as uCLinux. ...
    (comp.os.linux.embedded)
  • Re: Unix / Linux Program Port to OS/2 with GCC and LIBC: HowTo Support / Use of Unix Function "Symb
    ... The discussion of the MPlayer port comes up with the above subject. ... OS/2 port on Hobbes: http://hobbes.nmsu.edu/cgi-bin/h-search?key=coreutils_5.93 ... The Linux symbolic link function is introduced ...
    (comp.os.os2.multimedia)
  • Re: TOP Network Interface Port of a Sun Ultra 30
    ... What I had was a PCI card in my Linux ... this device connects to an Ethernet port. ... on the Sun that makes it not as possible to support the DEVICES I have on ... significant speed difference if I were to connect this to a network card ...
    (comp.sys.sun.hardware)
  • Re: Serial port blues
    ... digital amateur radio on Linux, because I'm curious whether or not the ... the serial port can only be controled by the kernel. ... processes without needing to hit the reset button. ...
    (Linux-Kernel)