hi,
In trying configure my firewall i found this ports open!

[root@server ~]# nmap 192.168.1.11

Starting Nmap 4.11 ( http://www.insecure.org/nmap/ ) at 2007-01-16 11:35 IST
Interesting ports on 192.168.1.11:
Not shown: 1674 closed ports
PORT STATE SERVICE
22/tcp open ssh
80/tcp open http
111/tcp open rpcbind
443/tcp open https
806/tcp open unknown
8080/tcp open http-proxy

Nmap finished: 1 IP address (1 host up) scanned in 0.459 seconds
[root@server ~]#

I have the following queries
1)which service runs on port 806
2)is it ssh, if so ,port 22 is also opened?
3)i have written a firewall rule to only allow my private network to access my web proxy service,but the above command output shows it is opened, not filtered?
[root@server ~]# iptables -L
Chain INPUT (policy ACCEPT)
target prot opt source destination
ACCEPT tcp -- 192.168.1.0/24 anywhere tcp dpt:webcache


4)is it necessary to secure portmap service running on 111?i will use it for nfs.If so, how i can put an entry for it in hosts.deny file?

thanks for any response

regards,
Nirmal Tom

1) On the machine with port 806 open, run
to find out what's listening on that port.

2) Could be, who knows?

3) Since you ran the scan against IP 192.168.1.11, aren't you doing a test from your internal network? If you want to see if your proxy is accessible by the internet, you will need to do the nmap externally.

hi,
[root@server ~]# netstat -anp | grep ":806"
tcp 0 0 0.0.0.0:806 0.0.0.0:* LISTEN 2320/rpc.statd

is rpc.statd portmap service?

thanx and regards,
Tom.

I don't know much about NFS, so I don't want to steer you wrong. The man page is probably more informative.

hi,
thanks a lot for your valuable time
regards,
Nirmal Tom.