Maybe the PIX is forwarding 25/tcp and 110/tcp to another server? A
mail server in particular. Do you run Exchange? What are the banners
when you telnet to those ports from an external machine?
Mike.
> -----Original Message-----
> From: Peter Rodger [mailto:prodger2008_at_yahoo.com]
> Sent: Tuesday, March 08, 2005 1:27 PM
> To: security-basics_at_securityfocus.com
> Subject: Port open - help
>
> Hi, all
>
> I just use nmap to scan our Citrix servers and found
> out ports 25 aqnd 110 open through public addresses.
> I can use telnet ip 25/110 and ports are open. But,
> no 25/110 services are installed on the Citrix
> servers. I used nmap to scan the Citrix servers using
> internal IP and ports 25/110 are not open. We use PIX
> 500 as a firewall.
>
> I did not open 25/110 for the Citrix servers on the
> firewall. Why are 25/110 ports open and how do I
> solve them?
>
>
> Thanks for any help!
>
> Peter
>
>
>
>
> __________________________________
> Celebrate Yahoo!'s 10th Birthday!
> Yahoo! Netrospective: 100 Moments of the Web
> http://birthday.yahoo.com/netrospective/
Received on Mar 09 2005
Intro
