OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
Subject: [suse-security] unknown service on port 1024 and open xdm ports
From: Holger-Schmidtarcor.net
Date: Wed Apr 12 2000 - 06:22:05 CDT

On my systems I try to close any many ports as possible without realising a
firewall !!

While examing all open ports I found at least three ports which are difficult to
close:

port service damon

515 printer lpd

1024 unknown ???

6000 X11 xdm

Then I've heard from someone on this list, that there's a possibility to close
X11 while
using the parameter "-nolisten tcp". This works fine and now port 6000 is
closed.

While I'm looking for the other ports I restarted the XDM process and so port
1024
changed into another one (1032, 1447, 1452) with different service-names (iad3,
apri-lm,
gtegsc-lm). Then I stop the XDM process and these funny processes were gone !!

When start XDM again, there will be another port with another service-name !!

Do you now what happen there ??

I tried it on another machine too and there I've got the following ports:

1024 unknown (after bootup)
1352 video-aktivman
1401 goldleaf-licman

I'm not sure if this a security-problem or not ?!

I hope that somebody can help me.

Bye
Holger

---------------------------------------------------------------------
To unsubscribe, e-mail: suse-security-unsubscribesuse.com
For additional commands, e-mail: suse-security-helpsuse.com