[suse-security] Open Port
Hi List! I just ran a "nmap -sS localhost", and what I got was the following: Starting nmap V. 2.53 by fyodor@insecure.org ( www.insecure.org/nmap/ ) Interesting ports on localhost (127.0.0.1): (The 1519 ports scanned but not shown below are in state: closed) Port State Service 22/tcp open ssh 80/tcp open http 631/tcp open unknown 6000/tcp open X11 Nmap run completed -- 1 IP address (1 host up) scanned in 0 seconds Now my question: what is that port 631 -> unknown. What could this be? Is it something I should take care of, or is it "normal"? Thanks in advance! Markus P.S: Have a look @ www.handybutler.ch __________________________________________________________________________ I believe the technical term is "Oops!"
It's the CUPS port for your printer. -Steven On Wednesday 16 May 2001 01:33 pm, Markus Kohli wrote:
Hi List! I just ran a "nmap -sS localhost", and what I got was the following:
Starting nmap V. 2.53 by fyodor@insecure.org ( www.insecure.org/nmap/ ) Interesting ports on localhost (127.0.0.1): (The 1519 ports scanned but not shown below are in state: closed) Port State Service 22/tcp open ssh 80/tcp open http 631/tcp open unknown 6000/tcp open X11
Nmap run completed -- 1 IP address (1 host up) scanned in 0 seconds
Now my question: what is that port 631 -> unknown. What could this be? Is it something I should take care of, or is it "normal"? Thanks in advance!
Markus
P.S: Have a look @ www.handybutler.ch
__________________________________________________________________________ I believe the technical term is "Oops!"
--------------------------------------------------------------------- To unsubscribe, e-mail: suse-security-unsubscribe@suse.com For additional commands, e-mail: suse-security-help@suse.com
Hello List, i've a problem with my susefirewall 4.6 and my dmz. The Suse Version is 7.1. my configuration: FW_ROUTE = yes FW_MASQUERADE = yes FW_FORWARD_TCP="0/0,xxx.xxx.xxx.xx,80" I could not ping a webserver which is inside the dmz. The FW_ALLOW_PING_DMZ Setting is set to "yes". HTTP Access to the webserver is also not available. Pings from the inside (local net) and from outside (internet) are blocked. If the Firewall is stopped, the HTTP Access is available also pings from outside and inside. The /var/log/firewall says on http access from outside: May 16 19:49:10 dolly kernel: Packet log: input DENY eth1 PROTO=6 xxx.xxx.xxx.xxx:80 217.2.190.56:65386 L=48 S=0x00 I=16 F=0x4000 T=64 (#4) On ping command from outside: May 16 19:51:00 dolly kernel: Packet log: input DENY eth1 PROTO=1 xxx.xxx.xxx.xxx:0 217.2.190.56:0 L=60 S=0x10 I=24 F=0x0000 T=255 (#4) eth1 is the interface to the dmz, eth2 is the interface to the internet, eth0 is the interface to the local net. Does anybody know what goes wrong? I've tested version 4.2 and 4.3 with the same configuration before, no change. Best Regards Andreas Müller
acme:/ # grep 631 /etc/services ipp 631/tcp # IPP (Internet Printing Protocol) ipp 631/udp # IPP (Internet Printing Protocol) : : Finding services to corresponding ports can be so easy... If you want to know which program/file opened that port, try netstat -anp | grep 631 or even lsof -i tcp:631 Hope that helps. Ralf (Shouldn't that be in the FAQ's? )
Hi List! I just ran a "nmap -sS localhost", and what I got was the following:
Starting nmap V. 2.53 by fyodor@insecure.org ( www.insecure.org/nmap/ ) Interesting ports on localhost (127.0.0.1): (The 1519 ports scanned but not shown below are in state: closed) Port State Service 22/tcp open ssh 80/tcp open http 631/tcp open unknown 6000/tcp open X11
Nmap run completed -- 1 IP address (1 host up) scanned in 0 seconds
Now my question: what is that port 631 -> unknown. What could this be? Is it something I should take care of, or is it "normal"? Thanks in advance!
Markus
P.S: Have a look @ www.handybutler.ch
__________________________________________________________________________ I believe the technical term is "Oops!"
* * Ralf Koch * mailto:info@formel4.de *
participants (4)
-
Andreas M�ller -
Markus Kohli -
Ralf Koch -
Steven Hatfield