Re: [cobalt-users] Portsentry Log After Install

["E.B. Dreger" <eddy+public+spam@xxxxxxxxxxxxxxxxx>]

EBD> Date: Mon, 8 Jul 2002 05:16:12 +0000 (GMT)
EBD> From: E.B. Dreger


EBD> IM> What is TCP 143 and is it anything to worry about.
EBD> 
EBD> 	grep -i 143/tcp /etc/services
EBD> 
EBD> It's something to worry about if you're running an
EBD> exploitable IMAP daemon. ;-)

Sorry to respond to my own post... 75% asleep and didn't think it
through enough. :-(

Checking /etc/services will tell you what _should_ run on what
port.  To see what's _really_ running[*] on 143/tcp, type:

	netstat -anp | grep ^tcp.*:143

and look for the proper line.

[*] One may wish to do this if one is paranoid.  Of course, if
    one is truly paranoid, one might not trust "netstat" without
    running an MD5 check on the binary...


Eddy
--
Brotsman & Dreger, Inc. - EverQuick Internet Division
Bandwidth, consulting, e-commerce, hosting, and network building
Phone: +1 (785) 865-5885 Lawrence and [inter]national
Phone: +1 (316) 794-8922 Wichita

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Date: Mon, 21 May 2001 11:23:58 +0000 (GMT)
From: A Trap <blacklist@xxxxxxxxx>
To: blacklist@xxxxxxxxx
Subject: Please ignore this portion of my mail signature.

These last few lines are a trap for address-harvesting spambots.
Do NOT send mail to <blacklist@xxxxxxxxx>, or you are likely to
be blocked.