pen-test
[Top] [All Lists]

Re: Strange ports

To: killy <killfactory@gmail.com>
Subject: Re: Strange ports
From: zion <zion.den@gmail.com>
Date: Tue, 19 Jun 2007 19:05:09 +1000
Cc: Pen-Tests <pen-test@securityfocus.com>
Delivered-to: sp-com-lists@consult.net
Delivered-to: pentest-list2@consult.net
Delivered-to: mailing list pen-test@securityfocus.com
Delivered-to: moderator for pen-test@securityfocus.com
Dkim-signature: a=rsa-sha1; c=relaxed/relaxed; d=gmail.com; s=beta; h=domainkey-signature:received:received:message-id:date:from:user-agent:mime-version:to:cc:subject:references:in-reply-to:content-type:content-transfer-encoding; b=axFt+wudh/kwL3MTHGNL4zPX+aILRaopgaw4VYynXLdZFFzg3DV/i89W5R/nd30bgoR77GJf4QaCimc3l6JNdtb06MsqGEwlzErgTzm6REtvpN+xKWf26LZFBhhMkaqUlMLKhimSLdRp6wyn+K59qmIoEOH9u73TJyekjbfQhuQ=
Domainkey-signature: a=rsa-sha1; c=nofws; d=gmail.com; s=beta; h=received:message-id:date:from:user-agent:mime-version:to:cc:subject:references:in-reply-to:content-type:content-transfer-encoding; b=Kyssc/Uu4xXGH0II54+FJTyeq+YvL1OizX7b0TzRfW3xqSxeeXJjiKWm27fivq0c3BSwQj/BdHZPenVmbr8Xkw+foeRHsa5+pXsrfm6f8LRRUepjUyjKFOrWL4Ni+pm4EoCIi8B+i26yu8arS8ebKJDVTeLWts/zkrtlJB1cLoE=
In-reply-to: <9c43c6dd0706181159g412a60bekeaabcae80143172a@mail.gmail.com>
List-help: <mailto:pen-test-help@securityfocus.com>
List-id: <pen-test.list-id.securityfocus.com>
List-post: <mailto:pen-test@securityfocus.com>
List-subscribe: <mailto:pen-test-subscribe@securityfocus.com>
List-unsubscribe: <mailto:pen-test-unsubscribe@securityfocus.com>
Mailing-list: contact pen-test-help@securityfocus.com; run by ezmlm
References: <9c43c6dd0706181159g412a60bekeaabcae80143172a@mail.gmail.com>
Resent-date: Tue, 19 Jun 2007 15:58:46 -0600 (MDT)
Resent-from: pen-test-return-1078484393@securityfocus.com
Resent-message-id: <20070619215846.DD9C5237419@outgoing3.securityfocus.com>
Resent-sender: listbounce@securityfocus.com
Sender: listbounce@securityfocus.com
User-agent: Thunderbird 2.0.0.4 (X11/20070617)
Hi Killy,

I am not sure if even port 53 needs to be open, It all depends on what service do you want to offer to the world. so you need to see if your organizations is offering this service to the world e.g. 3389 terminal service for the world to see ? you may need to contact some one in your organizations to ask if they need those services from the internet ?

Hope i have been of some help.

Regards
Zion


killy wrote:
Scanning my external firewall(at work), I (yes, it is my job to) find this:


PORT     STATE    SERVICE
53/tcp   open     domain

1029/tcp open     ms-lsa
1032/tcp open     iad3

3389/tcp open     ms-term-serv


Why would 1029 and 1032 need to be open from the outside?

-Kill



------------------------------------------------------------------------
This List Sponsored by: Cenzic

Are you using SPI, Watchfire or WhiteHat?
Consider getting clear vision with Cenzic
See HOW Now with our 20/20 program!

http://www.cenzic.com/c/2020
------------------------------------------------------------------------


<Prev in Thread] Current Thread [Next in Thread>