* Jörg Schütter <joerg.schuetter@gmx.de> [010524 10:42]:
Is there a nfs-server running on 212.156.196.114 ? If a
name-lookup is
startet the source-port is a free one above 1024. If there is no nfs-server running on this computer averityhing seems to bee all right.
No there is no nfs server running on that pc on the other hand I have checked my logs and found that 212.156.4.20 (nameserver of my ISP) had made requests to port 137 which were also denied by IPCHAINS.
Because your isp's nameserver is a braindead windoze box that is not firewalled. otherwise their firewall would block 137. See nmap results: Oh, it's not a windoze box: They run Digital Unix OSF1 V 4.0-4.0F and they are a worthy challange. Open tcp ports: 21, 23, 53, 79, 80, 111, 515, 902, 1024, 1519, 6000, 6112 and some open udp ports.
So if there is an err; is it on my side (ie firewall configuration )or at the ISP side ?
Think, your isp should think about security.
-- Togan Muftuoglu
--------------------------------------------------------------------- To unsubscribe, e-mail: suse-security-unsubscribe@suse.com For additional commands, e-mail: suse-security-help@suse.com