[cobalt-users] Funky raq4 with portsentry

[Jonathan Nichols <jnichols@xxxxxxxxxxxxxxxxx>]

One of the RaQ4's got rebooted today, after applying a few updates. 
Portsentry seemed to cause something funky to happen..

In /etc/rc.d/rc.local:
/usr/local/psionic/portsentry/portsentry -tcp
/usr/local/psionic/portsentry/portsentry -udp

Rebooted the machine, ran netstat -ta and it showed every possible 
service I could think of as ":LISTEN"

"WTF?" I thought. I kill -9'd portsentry, and ran netstat -ta again. 
This time only a few services were showing up. Fired up portsentry by 
hand, and it looked normal once again.

I've never seen it do this before. Portsentry is on the rest of the 
linux machines (Caldera) and it has never exhibited this odd behavior 
before.

Anybody else seen this? Good news is that the updates (all of them) 
seem to have not adversely affected anything on the unit. It's 
working fine, aside from the odd ports.

Oh! If I nmap the box, it shows every port that netstat -ta did as 
being open. Restarting portsentry like I did caused the nmap scans to 
show very few ports open.

Strange, indeed..
--
-Jonathan Nichols
System Administrator
http://www.sitesthatsell.com
jnichols@xxxxxxxxxxxxxxxxx