Re: port 514 troubles

From: Fondula di Carceri (fondula.di.carceri@gmx.net)
Date: 09/15/02 

From: "Fondula di Carceri" <fondula.di.carceri@gmx.net>
Date: Sun, 15 Sep 2002 12:31:19 GMT

Thanks for the information! It does shed light on my problem, but I'm still
finding what service actually opens up that port (xp home doesn't seem to
have and rshd, and the rsh is disabled).

Sincerely,
Fondula di Carceri [ fondula.di.carceri@gmx.net - pgp on request ]

"anyweb" <anyweb@nospamever.hotmail.com> schreef in bericht
news:nIPg9.8052$Uu.2216@news1.bredband.com...
> read here it might help
> http://www.mkssoftware.com/docs/man1/rshd.1.asp
> cheers
> anyweb
> --
> ^^
> // generated by anyweb, do not modify
> http://anyweb.kicks-ass.net
> "Fondula di Carceri" <fondula.di.carceri@gmx.net> wrote in message
> news:5Ltg9.116196$8o4.16492@afrodite.telenet-ops.be...
> > Dear all,
> > after tweaking out my xphome (patched up to date without sp1), it turns
> out
> > that some service/process/component/whatever has still opened up port
514
> > (normally used for rsh and such). I am absolutely one hundred procent
sure
> > that my system is as locked down as possible with windows, but still,
port
> > 514 remains open; even when explicitly denying it with my firewall
> > (zonealarmpro, denied thru 'generic host...'), filter rules with netsh,
> > disabling the use of raw sockets, et cetera. My system is
> > trojan/spyware/virus free. No other program is opening up 514, so I
guess
> > it's windows itself. Windows makes it impossible to find out which
service
> > or process is doing this, so I' m looking for answers here. Since 514 is
> > most used for remote login services, it quite worries me. Please don't
> tell
> > me this is a 'feature'... Any help is greatly appreciated - thank you!
> > Sincerely,
> > Fondula di Carceri [ fondula.di.carceri@gmx.net - pgp on request ]

Relevant Pages

  • RE: redhat-list Digest, Vol 4, Issue 38
    ... Re: Iptables: port 22 open only for my IP ... Windows Services for Unix 3.5 ... It does absolutely nothing if you have a rampant application on your Windows box that opens a port to the outside world. ...
    (RedHat)
  • Re: USB device detection via query registry information
    ... specific parts of a driver. ... it correctly enforces exclusivity to the port ... for Windows being crash-prone? ... serenum opens the port, detects the device, ...
    (microsoft.public.development.device.drivers)
  • Re: USB device detection via query registry information
    ... it correctly enforces exclusivity to the port ... WHQL is realistically not going to be able to catch all bugs before shipment, so maybe the answer is for WHQL signing to require a commitment from the driver developer to participate in the BSOD crash dump program and issue timely bug fixes. ... Yes these things would not come free, but is it important to Microsoft to shed the reputation for Windows being crash-prone? ... serenum opens the port, detects the device, ...
    (microsoft.public.development.device.drivers)
  • Re: USB device detection via query registry information
    ... for serial mouse detection, there is a window between detection and driver load. ... serenum opens the port, detects the device, closes the port and then enumerates the child device. ... either Windows should detect the mouse first and my CreateFile fails or else my CreateFile succeeds first and then SERENUM can't listen for data to run its heuristic mouse detection. ...
    (microsoft.public.development.device.drivers)
  • Re: port 514 troubles
    ... // generated by anyweb, do not modify ... > that some service/process/component/whatever has still opened up port 514 ... > that my system is as locked down as possible with windows, but still, port ... > it's windows itself. ...
    (microsoft.public.windowsxp.security_admin)