portscan looks like....

Volker Kindermann ml at ps102.de
Mon Aug 23 23:37:06 PDT 2004


Hi Bob,


> PORT     STATE SERVICE
> 22/tcp   open  ssh
> 25/tcp   open  smtp
> 80/tcp   open  http
> 111/tcp  open  rpcbind
> 1023/tcp open  netvenuechat
> 
> now, i made a faux pas when i configured this machine and had made
> this a nfs client...i belive that was the case.  I am now interested
> in turning this off, and will be able to do that with
> rpcbind_enable="NO" in rc.conf.

perfectly.


>      Then there is the case of the port 1023.  I have no idea how to
>      turn 
> this off or how it got turned on.  Could the rpcbind allowed someone
> into my computer to hack it up?  I am pretty scared at this point. 

First try to disable rpcbind and look afterwards, if port 1023 is still
open. If it ist, install lsof from ports. This tool will tell you which
application is listening on this port.


 -volker



More information about the freebsd-questions mailing list