[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

[cobalt-users] Portsentry and udp ports

Hello, 
Not too long back some had posted a site for getting a list of known sites to add to the hosts.deny file.  If someone could please post that address again i would appreciate it.  Also, after installing porrtsentry thing started to show up pretty quickly. Below are a few port attempts that were blocked and at least one of them i was able to trace to Hong Kong.  I am somewhat nervous that they have already been in my machine even though everthing seems alright.  Is there any obvious thing I can look for.  Also below is part of a netstat listing that show several open ports the last one has me concerned as it seems to change frequently.  Should I be more aggresive with the udp blocking  and also should these ports be blocked outright???


983674314 - 03/03/2001 19:51:54 Host: 205.162.249.251/205.162.249.251 Port: 111
TCP Blocked
983690745 - 03/04/2001 00:25:45 Host: 209.0.187.176/209.0.187.176 Port: 515 TCP
Blocked
983730305 - 03/04/2001 11:25:05 Host: 210.0.140.2/210.0.140.2 Port: 111 TCP Bloc
ked
983750348 - 03/04/2001 16:59:08 Host: 211.114.53.1/211.114.53.1 Port: 111 TCP Bl
ocked

Active UNIX domain sockets (w/o servers)
Proto RefCnt Flags       Type       State         I-Node Path
unix  4      [ ]         DGRAM                    1242   /dev/log
unix  1      [ ]         DGRAM      CONNECTED     1522
unix  1      [ ]         DGRAM      CONNECTED     1873
unix  1      [ ]         DGRAM      CONNECTED     8602



--------------------------------------------------------------------
Mail2Web - Check your email from the web at
http://www.mail2web.com/ .