More open port questions

BajaNick · 09-22-2003, 04:55 PM

I have port 88 open and nmap tells me it is kerberos-sec service and it shows it as filtered. Anyone know what that is and do i need it? Thanks

Saraev · 09-22-2003, 05:05 PM

General "safe" rule is "if you don't know what the port is for, google info on it, then block it if you're unsure. Someone will bitch if they NEED it."

BajaNick · 09-22-2003, 05:16 PM

I just did a google and found this:

http://web.mit.edu/kerberos/www/

I dont understand why a third party authentication program would use a specific port automatically.
I

unSpawn · 09-22-2003, 07:04 PM

I dont understand why a third party authentication program would use a specific port automatically.
It's because of standardisation (Google for IANA), just like HTTP has TCP/80 and DOOM has TCP/666...

do i need it?
Here's another way to find out: say you got a known package named krb5-libs(-version).rpm (else just do "rpm -q -a | grep krb" and select one), then if you do "rpm -q --whatrequires krb5-libs" and you get all the packages back that depend on kerberos (-libs in this case). Another way would be doing a deinstall with the "--test" flag. Any rpm with deps in krb5-libs should make rpm hurl chunks.