 | | | Port 25 and 110 | Port 25 and 110 2003-11-11 - By pdforest@(protected)
Back
I have rh9, kernel 2.4.20-8, I want all ports to be closed but 25 & 110 are still open. I 'm sure that no service are listening on them, the local nmap reports nothing but scanning it with a crossover cable, the Win Nmap reports them opened.
I tried with iptables droping everything, with the same result.
I have also tried telneting these ports, getting a connection for 20 seconds.
Any ideas ???
NMapWin v1.3.1
Starting nmap V. 3.00 ( www.insecure.org/nmap )
Warning: OS detection will be MUCH less reliable because we did not find at least 1 open and 1 closed TCP port
Interesting ports on (xxx.xxx.xxx.xxx):
(The 178 ports scanned but not shown below are in state: filtered)
Port State Service
25/tcp open smtp
110/tcp open pop-3
Remote operating system guess: Linux Kernel 2.4.0 - 2.5.20
Uptime 0.033 days (since Tue Nov 11 16:37:12 2003)
Nmap run completed -- 1 IP address (1 host up) scanned in 57 seconds
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN " >
<HTML > <HEAD >
<META content= "text/html; charset=iso-8859-1 " http-equiv=Content-Type >
<META content= "MSHTML 5.00.3315.2870 " name=GENERATOR >
<STYLE > </STYLE >
</HEAD >
<BODY bgColor=#ffffff >
<DIV > <FONT face=Arial size=2 >I have rh9 </FONT > <FONT face=Arial size=2 >, kernel
2.4.20-8, I want all ports to be closed but 25 & 110 are still open. I 'm
sure that no service are listening on them, the local nmap reports nothing but
scanning it with a crossover cable, the Win Nmap reports them
opened. </FONT > </DIV >
<DIV > <FONT face=Arial size=2 >I tried with iptables droping everything, with the
same result. </FONT > </DIV >
<DIV > <FONT face=Arial size=2 >I have also tried telneting these ports,
getting a connection for 20 seconds. </FONT > </DIV >
<DIV > </DIV >
<DIV > <FONT face=Arial size=2 >Any ideas ??? </FONT > </DIV >
<DIV > </DIV >
<DIV > </DIV >
<DIV > </DIV >
<DIV > <FONT face=Arial size=2 > <STRONG > <U >NMapWin v1.3.1 </U > </STRONG > </FONT > </DIV >
<DIV > <FONT face=Arial size=2 >Starting nmap V. 3.00 ( <A
href= "
http://www.insecure.org/nmap
" >www.insecure.org/nmap </A >
) <BR >Warning: OS detection will be MUCH less reliable because we did not
find at least 1 open and 1 closed TCP port <BR >Interesting ports on
(xxx.xxx.xxx.xxx): <BR >(The 178 ports scanned but not shown below are in state:
filtered) <BR >Port
State
Service <BR >25/tcp
open
smtp
<BR >110/tcp open
pop-3
<BR >Remote operating system guess: Linux Kernel 2.4.0 - 2.5.20 <BR >Uptime 0.033
days (since Tue Nov 11 16:37:12 2003) <BR >Nmap run completed -- 1 IP address (1
host up) scanned in 57 seconds </FONT > </DIV > </BODY > </HTML >
|
|
|