ghostly mail ports

From: joe (joseph.beard@btopenworld.com)
Date: 01/08/03

  • Next message: Rodel Calvario: "Inputs appreciated" 
    From: "joe" <joseph.beard@btopenworld.com>
To: <security-basics@securityfocus.com>
Date: Wed, 8 Jan 2003 00:45:23 -0000

    Hi, im new to security and this is my first post, so be gentle :)

    I have a fairly good understanding of the tcp/ip model and i think i
    understand what ports are for! but i cant understand that on my box, i have
    the 2 default mail ports (25 and 110) open. Its a windows 2000 box, service
    pack three. Im pretty sure im not running a mail server of any description.

    The ports appear in box scanline and superscan eg

    C:\>sl -bht 1-1000 192.168.0.1
    ScanLine (TM) 1.01
    Copyright (c) Foundstone, Inc. 2002
    http://www.foundstone.com

    Scan of 1 IP started at Wed Jan 08 00:36:51 2003

    ----------------------------------------------------------------------------
    -
    192.168.0.1
    Responded in 0 ms.
    0 hops away
    Responds with ICMP unreachable: No
    TCP ports: 25 110 135 139 445

    ----------------------------------------------------------------------------
    -

    Scan finished at Wed Jan 08 00:37:09 2003

    1 IP and 1000 ports scanned in 0 hours 0 mins 18.16 secs

    but in netstat, activeports, fport they dont! does anybody know where they
    have come from? i googled for ages but dont seem to be getting anywhere.

    thanks

    joe

    Relevant Pages

    • Re: ghostly mail ports
      ... Subject: ghostly mail ports ... > The ports appear in box scanline and superscan eg ... i googled for ages but dont seem to be getting anywhere. ...
      (Security-Basics)
    • Re: ghostly mail ports
      ... Are you running a virus scanner, such as Norton AntiVirus? ... > The ports appear in box scanline and superscan eg ... i googled for ages but dont seem to be getting anywhere. ...
      (Security-Basics)
    • RE: ghostly mail ports
      ... Are you running an antivirus package that checks incoming ... > understand what ports are for! ... > The ports appear in box scanline and superscan eg ... > but in netstat, activeports, fport they dont! ...
      (Security-Basics)
    • Re: Various package/ports problems
      ... i dont understand what im checking hte manpage to ... Running pkgdb -fu does rebuild the package ... its portupgrade version 2.0.1 (as reported ... all the ports listed, and now pkg_info is working correctly. ...
      (freebsd-questions)
    • Re[3]: interrupt routing
      ... Bad Tyan, no cookie. ... I dont experience any problems with the base system ... The ports collection isnt amd64-ready though. ... (I needed it to install Oracle) ...
      (freebsd-stable)