Open port

Peter plp-ysDPMY98cNQDDBjDh4tngg at public.gmane.org
Thu Apr 27 19:02:07 UTC 2006


On Thu, 27 Apr 2006, William O'Higgins Witteman wrote:

> On Wed, Apr 26, 2006 at 08:08:42PM +0300, Peter wrote:
>
>>> What is the "unknown" process listening on 816?  I notice that this is
>>> different port than it had before a reboot, but there was still an open
>>> port (I think it had a port around 900-ish).  If I "telnet localhost
>>> 816" a session is opened, and I am informed that ^] is the escape key,
>>> but that's all it says, and I don't know how to further investigate
>>> this.
>>
>> root# fuser -vn tcp 816
>
> Thank you, that tells me that the user process is "rpc.statd", which I
> assume is supposed to be there and nothing to worry about.  Thanks also
> to Vince, who suggested the same thing.

Actually you should firewall it imho. Same for all rpc* ports. Do not 
connect to the internet with that port open. It belongs to nfs/nfsd and 
portmap. So stop and disable that service if not using it.

Peter
--
The Toronto Linux Users Group.      Meetings: http://tlug.ss.org
TLUG requests: Linux topics, No HTML, wrap text below 80 columns
How to UNSUBSCRIBE: http://tlug.ss.org/subscribe.shtml





More information about the Legacy mailing list