|
Home > Archive > alt.os.linux > October 2002 > Are those ports open? Weird Problem!!
You are viewing an archived Text-only version of the thread.
To view this thread in it's original format and/or if you want to reply to
this thread please [click here]
| Author |
Are those ports open? Weird Problem!!
|
|
| NeXTstep 2002-10-28, 7:24 am |
| Hello,
While scanning machine "A" with Necrosoft Nscan ver 0.9.1, I get port
110 and 25 open.
While doing the same operation with nmap to machine "A", I don't get
those ports open!!
While doing "fuser 110/tcp" on machine "A" no PID is given (no process
listening on that port!!)
What's wrong??
NeXTstep
| |
| Sybren Stuvel 2002-10-28, 7:24 am |
| NeXTstep wrote:
> Hello,
>
> While scanning machine "A" with Necrosoft Nscan ver 0.9.1, I get port
> 110 and 25 open.
>
> While doing the same operation with nmap to machine "A", I don't get
> those ports open!!
>
> While doing "fuser 110/tcp" on machine "A" no PID is given (no process
> listening on that port!!)
>
> What's wrong??
Have you tried actually connecting to the ports?
$ telnet A 25
220 Welcome to mail system ESMTP
$telnet A 110
+OK <15786.1035809147@mail.thirdtower.com>
Sybren
--
To get the best help, ask questions the smart way:
http://www.tuxedo.org/~esr/faqs/sma...ions.html#intro
Don't crosspost. Post one post to a single group. If that group can't answer
your question, move on to the next group.
http://www.faqs.org/rfcs/rfc1855.html
| |
| NeXTstep 2002-10-28, 7:24 am |
| >
> Have you tried actually connecting to the ports?
>
Sorry, I forgot to tell about that! I telnetted them, and I'm able to
connect them but I'm not getting any "welcome" message!
> $ telnet A 25
> 220 Welcome to mail system ESMTP
>
> $telnet A 110
> +OK <15786.1035809147@mail.thirdtower.com>
>
NeXTstep
| |
| Sybren Stuvel 2002-10-28, 7:24 am |
| NeXTstep wrote:
> Sorry, I forgot to tell about that! I telnetted them, and I'm able to
> connect them but I'm not getting any "welcome" message!
Maybe you can find lines starting with 'pop' and 'smtp' in /etc/inetd.conf,
/etc/xinetd.conf or /etc/xinetd.d/* - remove them if you find them, then
restart (x)inetd
Sybren
--
To get the best help, ask questions the smart way:
http://www.tuxedo.org/~esr/faqs/sma...ions.html#intro
Don't crosspost. Post one post to a single group. If that group can't answer
your question, move on to the next group.
http://www.faqs.org/rfcs/rfc1855.html
| |
| Joe Fredrickson 2002-10-28, 7:24 am |
| On Mon, 28 Oct 2002 11:24 pm, NeXTstep posted to alt.os.linux the following
blurb ::
> While scanning machine "A" with Necrosoft Nscan ver 0.9.1, I get port
> 110 and 25 open.
Well 110 is pop3 and 25 is smtp (sendmail) so both are likely ports to be
open on a mail server....
> While doing the same operation with nmap to machine "A", I don't get
> those ports open!!
Try telneting to port 25
telnet machineA 25
If you connect then the service is there, otherwise nscan is having u on
--
remember this is the sequence of events, in no particular order
Registered Linux User 282072
<www.volutin.net -- everything irrelevant>
| |
| NeXTstep 2002-10-28, 7:24 am |
| > > Sorry, I forgot to tell about that! I telnetted them, and I'm able to
> > connect them but I'm not getting any "welcome" message!
>
> Maybe you can find lines starting with 'pop' and 'smtp' in
/etc/inetd.conf,
> /etc/xinetd.conf or /etc/xinetd.d/* - remove them if you find them, then
> restart (x)inetd
my distribution use xinetd - and there are no smtp, or pop3 related conf.
files into /etc/xinetd.d/
I also killed xinetd (to be 100% sure, it's not the guilty one  - but
those "ports" still results as "open"
any clue??
NeXTstep
| |
|
|
| Xanadu 2002-10-28, 9:24 am |
| On Mon, 28 Oct 2002 07:24:43 -0500, NeXTstep wrote:
> Hello,
>
> While scanning machine "A" with Necrosoft Nscan ver 0.9.1, I get
> port
> 110 and 25 open.
>
> While doing the same operation with nmap to machine "A", I don't get
> those ports open!!
>
> While doing "fuser 110/tcp" on machine "A" no PID is given (no
> process
> listening on that port!!)
>
> What's wrong??
>
> NeXTstep
What distro? If it's a RH/MDK/SuSE type, you can simply type this as
root:
chkconfig --list | grep 3 n
that will tell you ALL services that are running at boot. man chkconfig
From there, There's far too many ways of doing teh same thing. On gentoo
you want to look in /etc/runlevels/default and see what's there. man
rc-update
On Debian or something like that, you'll need to wait for someone to post
that as I've not used a Deb based system long enough to really learn it.
| |
| Sybren Stuvel 2002-10-28, 10:25 am |
| Xanadu wrote:
> chkconfig --list | grep 3n
>
> that will tell you ALL services that are running at boot.
Assuming you're starting in runlevel 3. Runlevel 5 is just as common (more
common nowadays?) so do
$ chkconfig --list | grep [35]n
instead ;-)
Sybren
--
To get the best help, ask questions the smart way:
http://www.tuxedo.org/~esr/faqs/sma...ions.html#intro
Don't crosspost. Post one post to a single group. If that group can't answer
your question, move on to the next group.
http://www.faqs.org/rfcs/rfc1855.html
| |
| NeXTstep 2002-10-28, 10:25 am |
|
"Sybren Stuvel" <sybrenUSE@YOURthirdtower.imagination.com> ha scritto nel
messaggio news:3dbd58ee$0$63816$e4fe514c
@dreader1.news.xs4all.nl...
> Xanadu wrote:
>
> > chkconfig --list | grep 3n
> >
> > that will tell you ALL services that are running at boot.
>
> Assuming you're starting in runlevel 3. Runlevel 5 is just as common (more
> common nowadays?) so do
>
> $ chkconfig --list | grep [35]n
>
my standard runlevel is 3 -- and anyways, there's no smtp-pop3 related
process running
NeXTstep
| |
| NeXTstep 2002-10-28, 10:25 am |
|
"Sybren Stuvel" <sybrenUSE@YOURthirdtower.imagination.com> ha scritto nel
messaggio news:3dbd4dd5$0$63808$e4fe514c
@dreader1.news.xs4all.nl...
> NeXTstep wrote:
>
> > any clue??
>
> What does 'netstat -anlp' say?
>
eheh a long list -- anyways, no smtp-pop3 related process running.
I have the routed daemon running ... any clue about that?? I have never
dealt with it
NeXTstep
| |
| Xanadu 2002-10-28, 2:25 pm |
| On Mon, 28 Oct 2002 10:38:02 -0500, Sybren Stuvel wrote:
> Xanadu wrote:
>
>> chkconfig --list | grep 3n
>>
>> that will tell you ALL services that are running at boot.
>
> Assuming you're starting in runlevel 3. Runlevel 5 is just as common
> (more common nowadays?) so do
>
> $ chkconfig --list | grep [35]n
>
> instead ;-)
>
> Sybren
OK, point made and taken. *BUT*, with the exception of X, anything
running at 3 is going to be running at 5. I know, I know, that's not
always true, but "out-of-the-box" with no tweaking, it is basically true.
However, yes you are correct. If it's really easy to look at both
configs at the same time, then why the hell not... :-)
|
|
|
|
|