Re: [PEN-TEST] Ports

[Pedro Margate <pedro () ECLIPSE NET>]

If you're talking about port 1025/udp, most often I've seen this when
running BIND on a box with ports 1-1024 filtered.  BIND needs to listen on
a UDP port in order to receive replies to forwarded requests, normally it
will just grab the first open one it finds.  Upon starting it logs an
entry regarding this port, like so:

Dec 17 14:41:51 named[427]: Forwarding source address is [0.0.0.0].1025

HTH

Regards,
Pedro

On Sat, 16 Dec 2000, Matt wrote:

> I know there was a discussion on this list a while back about ports.
> Recently on two different machines I have noticed a wierd port 1025,
> open.  I cant think of any program that uses it.  I have checked the
> port database and it says network blackjack.  Any searching on network
> blackjack has come up as more lists of ports, and no information on what
> it is.  Does anyone here know what this is.
>
> Thanks
>
> Matt Carlson