RE: Port open - help

["Mike" <mike_sha () shaw ca>]

Maybe the PIX is forwarding 25/tcp and 110/tcp to another server?  A
mail server in particular.  Do you run Exchange?  What are the banners
when you telnet to those ports from an external machine?

Mike.

> -----Original Message-----
> From: Peter Rodger [mailto:prodger2008 () yahoo com]
> Sent: Tuesday, March 08, 2005 1:27 PM
> To: security-basics () securityfocus com
> Subject: Port open - help
>
> Hi, all
>
> I just use nmap to scan our Citrix servers and found
> out ports 25 aqnd 110 open through public addresses.
> I can use telnet ip 25/110 and ports are open.  But,
> no 25/110 services are installed on the Citrix
> servers.  I used nmap to scan the Citrix servers using
> internal IP and ports 25/110 are not open.  We use PIX
> 500 as a firewall.
>
> I did not open 25/110 for the Citrix servers on the
> firewall.  Why are 25/110 ports open and how do I
> solve them?
>
>
> Thanks for any help!
>
> Peter
>
>
>
>
> __________________________________
> Celebrate Yahoo!'s 10th Birthday!
> Yahoo! Netrospective: 100 Moments of the Web
> http://birthday.yahoo.com/netrospective/