Re: Help Required

[sim <simeonuj () eetc com>]

> From: Don Tuer <Don_Tuer () dtaadv on ca>
> Date: Sat, 13 Jan 2001 17:07:53 -0500
> To: "'firewall-wizards () nfr net'" <firewall-wizards () nfr net>
> Subject: [fw-wiz] Help Required
>
> Hello:
>
> I just ran nmap on my web server and received the following, rather
> disturbing picture. I'm quite surprised about the netbios stuff as I have
> unbound the Microsoft client and server from the nic facing the net. Any
> help on what these other ports could be would be appreciated.
>
> Thanks
>
> Don
>
> NMAP output
>
> Port       State       Service
> 25/tcp     open        smtp
Simple Mail Transfer Protocol
> 53/tcp     open        domain
This port is used for DNS.
> 80/tcp     open        http
Web
> 119/tcp    open        nntp
Network News Transfer Protocol.
> 135/tcp    open        loc-srv
> 139/tcp    open        netbios-ssn
> 389/tcp    open        ldap
Lightweight Directory Access Protocol
> 563/tcp    open        snews
NNTP over SSL.  Secure News.
> 1002/tcp   open        unknown
> 1058/tcp   open        nim
> 1723/tcp   open        pptp
PPTP is Microsoft's VPN protocol.  Supposedly it is a security risk on a
Microsoft machine acting as a server.  I am not sure about this but
something about the way they implement it, NOT the protocol itself, has some
problems.  Don't quote me on this:-)
> 3005/tcp   open        deslogin
> 6666/tcp   open        irc-serv
This looks like an IRC server.  As far as I know IRC is rather insecure.
> 7007/tcp   open        afs3-bos

That's all I know about them right now but I hope it helps.

sim

_______________________________________________
firewall-wizards mailing list
firewall-wizards () nfr com
http://www.nfr.com/mailman/listinfo/firewall-wizards