Re: [cobalt-users] Portsentry works fine: port 111

[Jason Woods <jwoods@xxxxxxxxxxxxxxx>]

NFS, for one.  If portsentry is detecting a scan on a port, and you are
using the advanced sentry, then you are more than likely not using that
port.

Steven Kidd wrote:
> 
> Hi,
> 
> So what is the sunrpc port actuaaly used for?
> 
> Steve
> 
> -----Original Message-----
> From: cobalt-users-admin@xxxxxxxxxxxxxxx
> [mailto:cobalt-users-admin@xxxxxxxxxxxxxxx]On Behalf Of Marc Gear
> Sent: Friday, March 30, 2001 10:31 PM
> To: cobalt-users@xxxxxxxxxxxxxxx
> Subject: Re: [cobalt-users] Portsentry works fine: port 111
> 
> > >> what's so special about port 111 (this sun remot procedure call)?
> 
> As john said, its the sunrpc port and there are a while world of exploits
> availiable for it.arbiet rather outdated ones.
> 
> > > looks like the anklebitters are hoping your raq will be an easy
> > > target.
> 
> it is more likley that they were not specifically hoping his raq was an easy
> target, rather scanning a while range of ports with 111 open, probably a
> couple of class B's  Dont think you're being picked on, or special in some
> way cos you got scanned on this port :)
> 
> --
> /\/\ a R (
> 
> _______________________________________________
> cobalt-users mailing list
> cobalt-users@xxxxxxxxxxxxxxx
> To Subscribe or Unsubscribe, please go to:
> http://list.cobalt.com/mailman/listinfo/cobalt-users
> 
> _______________________________________________
> cobalt-users mailing list
> cobalt-users@xxxxxxxxxxxxxxx
> To Subscribe or Unsubscribe, please go to:
> http://list.cobalt.com/mailman/listinfo/cobalt-users

-- 
Jason Woods
Oakland Corporation
Hardware Department
414 Broad Street
Story City, IA 50248
Phone: 515-733-5114
Fax  : 515-733-4821
Email: jwoods@xxxxxxxxxxxxxxx