What does udp port 514 use?

[Erik Norgaard]

Miguel wrote:
> Halid Faith wrote:
> 
>> 2 - When I type netstat -na  I see that udp port 514 is open as below
>> udp4       0      0  *.514                  *.*
>> udp6       0      0  *.514                  *.*
>>
>> Should I close this port ? then How can I close this port?
>>  
> that is the syslog port for remote hosts' events , you can disable it 
> adding this to your rc.conf
> 
> syslog_flags="-ss"

The default setting is "-s" which means that syslog will not log events 
from foreign hosts. -ss means it wont listen at all on that port.

There are few reasons to have syslog listening on that port:

There might be some services running on you host (not that I know any) 
that try to write to the loopback interface rather than a UNIX socket. 
In that case you can force syslog only to bind to the loopback interface 
adding "-b localhost".

Also, you should have your local firewall block incoming traffic.

Cheers, Erik

-- 
Ph: +34.666334818                                  web: www.locolomo.org
S/MIME Certificate: www.daemonsecurity.com/ca/8D03551FFCE04F06.crt
Subject ID:  9E:AA:18:E6:94:7A:91:44:0A:E4:DD:87:73:7F:4E:82:E7:08:9C:72
Fingerprint: 5B:D5:1E:3E:47:E7:EC:1C:4C:C8:3A:19:CC:AE:14:F5:DF:18:0F:B9