RE: [cobalt-users] Portsentry blocking port 22

["Paul Fennell" <paul@xxxxxxxxxxx>]

FYI

Port 22 ssh, pcAnywhere ssh (TCP)
Port 22 is the default for SSH servers.

Port 22 (UDP) is the default port for some pcAnywhere services.
Note that there is not relationship with pcAnywhere and ssh.

SSH-SSH runs on TCP port 22 by default.
Clients use random ports to connect to port 22 on the system they are trying
to log onto.
Connections attempts against TCP port 22 often indicate hackers looking for
ssh systems with well-known holes.
PCanywhere ports-UDP packets sent to this port are generally from
pcAnywhere.

Port 5632-The real port is 5632.
The value 0x0016 (hex) is 22 decimal; the value of 0x1600 (hex) is 5632
decimal.
Some say that pcAnywhere had a byte-swapping bug that led to its incorrect
use of port 22.

( but im sure you guys know this :) )
- Paul
Satachi Internet Development


-----Original Message-----
From: cobalt-users-admin@xxxxxxxxxxxxxxx
[mailto:cobalt-users-admin@xxxxxxxxxxxxxxx]On Behalf Of Simon Pierce
Sent: 24 June 2002 16:17
To: cobalt-users@xxxxxxxxxxxxxxx
Subject: [cobalt-users] Portsentry blocking port 22


Portsentry has suddenly decided to block port 22 on one of our RaQ3s - ever
since installing the RaQ3-All-Security-4.0.1-13453.pkg Cobalt patch last
week.

Any idea why this is and what I can do about it? Originally Portsentry was
installed from a .pkg at http://www.linuxnetworking.co.uk/

At present I can only Telnet in - so I'm desperate to get this sorted!

(Additionally, it's amazing the huge amount of people (presumably hackers?)
that have tried to access port 22 and been blocked by Portsentry since this
happened)


Regards,

Simon

_______________________________________________
cobalt-users mailing list
cobalt-users@xxxxxxxxxxxxxxx
To Subscribe or Unsubscribe, please go to:
http://list.cobalt.com/mailman/listinfo/cobalt-users