24 Sep
2001
24 Sep
'01
17:31
Ports >= 1024 are almost always outgoing connections, which would fit with your having mounted a filesystem. I don't think you need to firewall it, as it should only listen to the machine you're connected to (if it doesn't we'll hear about it on bugtraq, I'm sure). regards Anders On Monday 24 September 2001 15.49, Praise wrote:
I have found out that a strange udp port was opened in my system. That port is 1168. I know that 137 and 138 are needed for nmbd, but what is this port for? It comes out not from my base smbd daemon, but from a child process (I have mounted a filesystem there).
Why is that? How can I firewall it? I do not think next time it will be the same port :-(
Tazio