Re: Win2000-Server tries to connect various machines on port 53
From: Ken Schaefer (kenREMOVE_at_THISadOpenStatic.com)
Date: 08/22/03
- Next message: Ted: "Restricting access to AD-integrated DNS-zones?"
- Previous message: S. Pidgorny [MVP]: "Re: Gateway exploit"
- In reply to: Kay Lehmann: "Win2000-Server tries to connect various machines on port 53"
- Next in thread: Kay Lehmann: "Re: Win2000-Server tries to connect various machines on port 53"
- Reply: Kay Lehmann: "Re: Win2000-Server tries to connect various machines on port 53"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Date: Fri, 22 Aug 2003 19:05:21 +1000
Are you running a DNS server on this machine (I assume you are, since you
say it is a Domain Controller, and Windows 2000 domains require Active
Directory)?
Port 53 (UDP) is for DNS. If you are running a DNS server on this machine,
it may be connecting out to do a DNS lookup.
Cheers
Ken
-- ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ "Kay Lehmann" <kay_lehmann@web.de> wrote in message news:3f45d632$0$2342$9b4e6d93@newsread2.arcor-online.net... : Hello everybody, : : I have following porblem with a win2000 server: : : It tries to connect varous machines on port 53. Some of the adresses are: : : 158.38.0.181 : 193.0.0.193 : 194.176.32.129 : 192.36.125.2 : 137.39.1.3 : 128.214.4.29 : ... : : So as I am not administrator of this machine and I am not that familiar with : windows, but has to configure the firewall, I wanted to know if somebody : can tell me how to find the program, which tries to connect to the outside. : Maybe a trojan, worm or something else? I tried to find something about a : this in the internet but I do not know where to find a searching machine : where I can insert some symptoms of the behavior of my machine which gives : a list of worms or viruses which could be the reason, is there any? The : other question is: : : Which ports should be normally opened on the win2000 server (It works as : domain controller). nmap gives me:
- Next message: Ted: "Restricting access to AD-integrated DNS-zones?"
- Previous message: S. Pidgorny [MVP]: "Re: Gateway exploit"
- In reply to: Kay Lehmann: "Win2000-Server tries to connect various machines on port 53"
- Next in thread: Kay Lehmann: "Re: Win2000-Server tries to connect various machines on port 53"
- Reply: Kay Lehmann: "Re: Win2000-Server tries to connect various machines on port 53"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Relevant Pages
|