Re: Strange connections reported by netstat

  • From: "Jim Harrison" <jim@xxxxxxxxxxxx>
  • To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx>
  • Date: Mon, 12 Nov 2001 08:32:52 -0800

Take a look at this:
http://www.isaserver.org/pages/tutorials/setting_up_machine_before_isa_insta
lltion.htm

Also, if you've disabled packet filtering, you're wide open to the world.

Jim Harrison
MCP(NT4, 2K), A+, Network+, PCG


----- Original Message -----
From: "Alin Selicean" <alin_selicean@xxxxxxxxx>
To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx>
Sent: Monday, November 12, 2001 07:55
Subject: [isalist] Strange connections reported by netstat


http://www.ISAserver.org


Hi, all !

I scanned my ISA external interface for open ports and I noticed that
since last scan, 2 ports appear as open: 135 and 443.

Issuing a netstat -an, I noticed these connections:
  UDP    0.0.0.0:37             *:*
  UDP    0.0.0.0:123            *:*
  UDP    0.0.0.0:135            *:*
  UDP    0.0.0.0:445            *:*
  UDP    0.0.0.0:3003           *:*
  UDP    0.0.0.0:3005           *:*
  UDP    0.0.0.0:3456           *:*
  UDP    0.0.0.0:3457           *:*
  UDP    0.0.0.0:17953          *:*
  UDP    0.0.0.0:18137          *:*
  UDP    127.0.0.1:53           *:*
  UDP    127.0.0.1:3004         *:*

Are they normal connections ? I guess not.

How can get rid of these and eventually closing those ports.

Initially, I had only 2 ports open: 25 and 80.

TIA,
Alin

------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
jim@xxxxxxxxxxxx
To unsubscribe send a blank email to $subst('Email.Unsub')




Other related posts: