Re: ghostly mail ports

From: JM (jm_at_mindless.com)
Date: 02/19/04

  • Next message: H Carvey: "Re: Keen to test out root kits" 
    To: <patrick@curioustechnology.com>, <joseph.beard@btopenworld.com>
Date: Thu, 19 Feb 2004 19:34:09 -0000

    Norton runs a proxy service for pop and smtp.

    These ensure that any pop and smtp traffic passes through norton before
    actually getting to the protected machine.

    Stop the Symantec proxy services and run the scan again.

    ----- Original Message -----
    From: <patrick@curioustechnology.com>
    To: <joseph.beard@btopenworld.com>
    Cc: <security-basics@securityfocus.com>
    Sent: Thursday, February 19, 2004 7:00 AM
    Subject: Re: ghostly mail ports

    Hi Joseph,

    I'm just digging through a problem with Windows Server 2003 SE and I found
    your port problem at the Security Basics email archive
    (http://seclists.org/lists/security-basics/2003/Jan/0090.html). I was
    wondering if you ever found resolution.

    I too am finding that my server shows ports 25 and 110 as open even though
    netstat on the box does not show them as open. I suspect one of two things
    could be going on:
    1) Windows XP's ICF sometimes creates unusual behavior when scanning a
    target box as can be outlined at the following link:
    http://seclists.org/lists/nmap-dev/2003/Apr-Jun/0020.html
    I'm wondering if there's some further strange behavior that hasn't been
    identified due to this.
    2) One of the other posters mentioned that they saw behavior like this that
    seemed to be related to Norton Antivirus. I happen to be running it here on
    my XP box (the one from which I'm scanning). I'm wondering if perhaps
    Norton running on the client can create similar problems to ICF.

    But these are just guesses. Did you ever reach resolution?

    - Patrick

    ---------------------------------------------------------------------------- 

    ----
> --------------------------------------------------------------------------
-
> Free trial: Astaro Security Linux -- firewall with Spam/Virus Protection
>
> Protect your network with the comprehensive security solution that
> integrates six applications for ease of use and lower TCO.
>
> Firewall - Virus protection - Spam protection - URL blocking - VPN
> - Wireless security.
>
> Download 30-day evaluation at:
> http://www.securityfocus.com/sponsor/Astaro_security-basics_040219
> --------------------------------------------------------------------------
--
---------------------------------------------------------------------------
Free trial: Astaro Security Linux -- firewall with Spam/Virus Protection
Protect your network with the comprehensive security solution that
integrates six applications for ease of use and lower TCO.
Firewall - Virus protection - Spam protection - URL blocking - VPN
- Wireless security.
Download 30-day evaluation at:
http://www.securityfocus.com/sponsor/Astaro_security-basics_040219
----------------------------------------------------------------------------
  • Next message: H Carvey: "Re: Keen to test out root kits"

    Relevant Pages

    • Re: Errors in Outlook Express since Windows Update April 2007
      ... When you installed NIS 2007, did you accept the option to make NIS the default Security Center, overriding the Windows Security Center? ... Norton AntiVirus Auto-Protect scans incoming files as they are saved to your hard drive, ... To make sure that Auto-Protect is providing the maximum protection, keep Auto-Protect enabled and run LiveUpdate regularly to ensure that you have the most recent virus definitions. ...
      (microsoft.public.windows.inetexplorer.ie6_outlookexpress)
    • Re: Symantecs Norton Suite
      ... Internet Security, Norton Anti-Virus, or Norton Personal Firewall for our ... modem with no hardware based protection. ...
      (microsoft.public.windowsxp.security_admin)
    • Re: Norton Internet Security 25% off
      ... Windows security holes shielded ... Includes Norton Anti-Virus ... parental controls offer additional protection. ...
      (comp.os.linux.misc)
    • Re: XP Security turning off virus protection
      ... I disabled AZ firewall, scanned for Viruses and updated the ... Norton Products do have some issues but I have been using their ... The issue for this group is why Windows XP turns off virus protection ... in the windows security center. ...
      (microsoft.public.windowsxp.security_admin)
    • MTIndia Newsletter - Proactive provisions to protect PHI
      ... on India's Information Security Environment. ... Security orientation of the Indian IT services and ITES-BPO market. ... Protection is through implication and therefore damages ... transcription and information management services to University of Michigan ...
      (sci.med.transcription)