Security Basics mailing list archives

Re: ghostly mail ports


From: "Florian Hobelsberger / BlueScreen" <genius28 () gmx de>
Date: Fri, 10 Jan 2003 10:34:23 +0100

Have you ever tried to telnet the port ?

Open your shell => "telnet localhost 25" or "telnet localhost 110" ?
If yes, what banner comes up then ? Or don't you get a banner ?

At least netstat can't show you open ports until there is something
connected
to it. For example:

Open one shell, and try netstat - you won't see the ports you complained
about in the list. Open another shell, connect with your telnet client to
one
of your "mail"-ports an run in the other shell netstat again. Now, this port
appears.
If you try "netstat /?" you will see a description of this kind (loosely
translated
from german into english):
Shows statistics of protocols and current network connections.
As a result, non-established connections are usually not shown.
If you want to show all open ports at your machine (and their connections)
try using "netstat -a -n".



With some programs like ATGuard personal firewall you can look up
which port is used by which program - it lists all open ports and shows
you the associated applications. Perhaps this could help you.

-------------------------------------------------------
BlueScreen / Florian Hobelsberger (UIN: 101782087)
Member of:
www.IT-Checkpoint.net
www.Hackeinsteiger.de
www.DvLdW.de

==================================================================
To encrypt classified messages, please download and use this PGP-Key:

http://www.florian-hobelsberger.de/BlueScreen-PGP-PubKey.txt
==================================================================



Current thread: