Hey all, On my systems I try to close as many ports as possible without realising a firewall !! For the portscans I use "nmap". While examing all open ports I found at least three ports which are difficult to close: port service damon 515 printer lpd 1024 unknown ??? 6000 X11 xdm Then I've heard from someone on this list, that there's a possibility to close X11 while using the parameter "-nolisten tcp". This works fine and now port 6000 is closed. While I'm looking for the other ports I restarted the XDM process and so port 1024 changed into another one (1032, 1447, 1452) with different service-names (iad3,apri-lm,gtegsc-lm). Then I stop the XDM process and these funny processes were gone !! When start XDM again, there will be another port with another service-name !! Do you now what happen there ?? I tried it on another machine too and there I've got the following ports: 1024 unknown (after bootup) 1352 video-aktivman 1401 goldleaf-licman I'm not sure if this a security-problem or not ?! I hope that somebody can help me. Bye Holger PS: Now after a reboot of the system and a additional /sbin/init.d/xdm restart the funny ports and processes are gone !! --------------------------------------------------------------------- To unsubscribe, e-mail: suse-security-unsubscribe@suse.com For additional commands, e-mail: suse-security-help@suse.com