[cobalt-users] RE:port 649

["James Mackay" <jjma@xxxxxxxxxxxxxx>]

>I just did what you said,  found three ports open  617 & 7937 & 7938

Thanks - The reason I asked was that appeared in the kernel log. Here is the output:

Nov 19 10:38:36 www kernel: Packet log: input DENY eth0 PROTO=17 213.165.152.4:4907 213.165.152.255:694 L=192 S=0x00 I=65169

The IP above goes to a web site www.999index.com (not a user of mine) and after investigating fund that the IP belongs to Teletext
(which I am not subscribed)

11/20/01 23:09:53 IP block 213.165.152.4
Trying 213.165.152.4 at ARIN
Trying 213.165.152 at ARIN
Redirecting to RIPE ...
Trying 213.165.152.4 at RIPE
Trying 213.165.152 at RIPE
Trying 213.165 at RIPE
% This is the RIPE Whois server.
% The objects are in RPSL format.
% Please visit http://www.ripe.net/rpsl for more information.
% Rights restricted by copyright.
% See http://www.ripe.net/ripencc/pub-services/db/copyright.html

inetnum:      213.165.0.0 - 213.165.1.255
netname:      TELETEXTNET
descr:        Teletext Network
country:      GB
admin-c:      PAS42-RIPE
tech-c:       PAS42-RIPE
rev-srv:      ns0.teletext.net
rev-srv:      ns3.teletext.net
status:       ASSIGNED PA
mnt-by:       TELETEXT-MNT-HM
changed:      philips@xxxxxxxxxxxxxx 20000308
changed:      johng@xxxxxxxxxxxxxx 20000816
source:       RIPE

Port 649 is used with Linux-HA, heartbeat, which is used on Linux clusters and seems to be commonly used
on serial devices? Didn't know the raq4r installed heartbeat?