Re: Strange connections reported by netstat

Thanks, Jim !

I discovered my mistake. Inadvertenly, I restored an obsolete
configuration in which IP packet filters were disabled for some
connectivity issues.

Now I have only 2 ports opened: 25 and 80, as it should be.

Thank you.

> Take a look at this:
> http://www.isaserver.org/pages/tutorials/setting_up_machine_before_isa_insta
> lltion.htm
> 
> Also, if you've disabled packet filtering, you're wide open to the world.
> 
> Jim Harrison
> MCP(NT4, 2K), A+, Network+, PCG
> 
> 
> ----- Original Message -----
> From: "Alin Selicean" <alin_selicean@xxxxxxxxx>
> To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx>
> Sent: Monday, November 12, 2001 07:55
> Subject: [isalist] Strange connections reported by netstat
> 
> 
> http://www.ISAserver.org
> 
> 
> Hi, all !
> 
> I scanned my ISA external interface for open ports and I noticed that
> since last scan, 2 ports appear as open: 135 and 443.
> 
> Issuing a netstat -an, I noticed these connections:
>   UDP    0.0.0.0:37             *:*
>   UDP    0.0.0.0:123            *:*
>   UDP    0.0.0.0:135            *:*
>   UDP    0.0.0.0:445            *:*
>   UDP    0.0.0.0:3003           *:*
>   UDP    0.0.0.0:3005           *:*
>   UDP    0.0.0.0:3456           *:*
>   UDP    0.0.0.0:3457           *:*
>   UDP    0.0.0.0:17953          *:*
>   UDP    0.0.0.0:18137          *:*
>   UDP    127.0.0.1:53           *:*
>   UDP    127.0.0.1:3004         *:*
> 
> Are they normal connections ? I guess not.
> 
> How can get rid of these and eventually closing those ports.
> 
> Initially, I had only 2 ports open: 25 and 80.
> 
> TIA,
> Alin
> 
> ------------------------------------------------------
> You are currently subscribed to this ISAserver.org Discussion List as:
> jim@xxxxxxxxxxxx
> To unsubscribe send a blank email to $subst('Email.Unsub')

Other related posts: