LinuxQuestions.org
Share your knowledge at the LQ Wiki.
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Security
User Name
Password
Linux - Security This forum is for all security related questions.
Questions, tips, system compromises, firewalls, etc. are all included here.

Notices


Reply
  Search this Thread
Old 01-16-2007, 01:19 AM   #1
nirmaltom
Member
 
Registered: Jun 2005
Location: India
Distribution: Redhat,Fedora,DSL,Ubuntu
Posts: 238

Rep: Reputation: 30
which service runs on port 806?


hi,
In trying configure my firewall i found this ports open!

[root@server ~]# nmap 192.168.1.11

Starting Nmap 4.11 ( http://www.insecure.org/nmap/ ) at 2007-01-16 11:35 IST
Interesting ports on 192.168.1.11:
Not shown: 1674 closed ports
PORT STATE SERVICE
22/tcp open ssh
80/tcp open http
111/tcp open rpcbind
443/tcp open https
806/tcp open unknown
8080/tcp open http-proxy

Nmap finished: 1 IP address (1 host up) scanned in 0.459 seconds
[root@server ~]#

I have the following queries
1)which service runs on port 806
2)is it ssh, if so ,port 22 is also opened?
3)i have written a firewall rule to only allow my private network to access my web proxy service,but the above command output shows it is opened, not filtered?
[root@server ~]# iptables -L
Chain INPUT (policy ACCEPT)
target prot opt source destination
ACCEPT tcp -- 192.168.1.0/24 anywhere tcp dpt:webcache


4)is it necessary to secure portmap service running on 111?i will use it for nfs.If so, how i can put an entry for it in hosts.deny file?

thanks for any response

regards,
Nirmal Tom
 
Old 01-16-2007, 01:56 AM   #2
CroMagnon
Member
 
Registered: Sep 2004
Location: New Zealand
Distribution: Debian
Posts: 900

Rep: Reputation: 33
1) On the machine with port 806 open, run
Code:
netstat -anp | grep ":806"
to find out what's listening on that port.

2) Could be, who knows?

3) Since you ran the scan against IP 192.168.1.11, aren't you doing a test from your internal network? If you want to see if your proxy is accessible by the internet, you will need to do the nmap externally.
 
Old 01-16-2007, 04:05 AM   #3
nirmaltom
Member
 
Registered: Jun 2005
Location: India
Distribution: Redhat,Fedora,DSL,Ubuntu
Posts: 238

Original Poster
Rep: Reputation: 30
hi,
[root@server ~]# netstat -anp | grep ":806"
tcp 0 0 0.0.0.0:806 0.0.0.0:* LISTEN 2320/rpc.statd

is rpc.statd portmap service?

thanx and regards,
Tom.
 
Old 01-16-2007, 09:53 PM   #4
CroMagnon
Member
 
Registered: Sep 2004
Location: New Zealand
Distribution: Debian
Posts: 900

Rep: Reputation: 33
I don't know much about NFS, so I don't want to steer you wrong. The man page is probably more informative.
 
Old 01-17-2007, 06:08 AM   #5
nirmaltom
Member
 
Registered: Jun 2005
Location: India
Distribution: Redhat,Fedora,DSL,Ubuntu
Posts: 238

Original Poster
Rep: Reputation: 30
hi,
thanks a lot for your valuable time
regards,
Nirmal Tom.
 
  


Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
LXer: Entry-level 4-port IP power switch runs Linux LXer Syndicated Linux News 0 10-13-2006 01:21 AM
Does one service use more than one port? mrpc_cambodia Red Hat 1 10-04-2004 02:26 AM
How do you change what the /usr/sbin/service program runs? launchcode Red Hat 3 07-16-2004 02:18 PM
Problem when Nagios Monitoring runs ping service sanfran49 Linux - Software 0 08-22-2003 01:12 PM
What is 510 port service? minor Linux - Security 1 05-11-2001 04:28 PM

LinuxQuestions.org > Forums > Linux Forums > Linux - Security

All times are GMT -5. The time now is 10:07 PM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Facebook: linuxquestions Google+: linuxquestions
Open Source Consulting | Domain Registration