RE: [cobalt-users] Port 3598 Scans

[aljuhani <aljuhani@xxxxxxxxx>]

Hello,

I tried to connect to my Server on Port 3598 and were unable to connect.  But 
that did not trigger the portsentry which means that port is not monitored.

I have found from Yahoo Search of "Port 3598" a website that says:

Q: What are the TCP port numbers of the NEWS, INFO and TUTOR servers in TNOS ?

A: NEWS server is on port 3597
INFO server is on port 3598
TUTOR server is on port 3599

Here is the link:
http://www.vdazone.org/lantzdocs/faq.html

I also Checked the port assignments from IANA and:

[RFC768] Postel, J., "User Datagram Protocol", STD 6, RFC 768,
         USC/Information Sciences Institute, August 1980.

[RFC793] Postel, J., ed., "Transmission Control Protocol - DARPA
         Internet Program Protocol Specification", STD 7, RFC 793,
         USC/Information Sciences Institute, September 1981

and it indicates that ports from 3564 to 3671 are Unassigned.

Hope this helps.

Al-Juhani
aljuhani@xxxxxxxxx

>===== Original Message From cobalt-users@xxxxxxxxxxxxxxx =====
>Hi Yah,
>
>For the last few weeks I've seen continual scans on port 3598 from a large
>number of sources, IP Chains has been dropping them but I've done several
>searches on the list plus at Google to see what port 3598 is but no joy.
>Can anyone enlighten me please :)
>
>While I'm here the saga of the mysterious dying RAQ3, - wasn't Portsentry,
>wasn't my firewall settings, the previous hosts/owners of the raq had
>another firewall script set-up and this was blocking several of the ports
>that was stopping the backup server sending the return ftp info deleted
>that one and touch wood 3 weeks and everyone a winner.
>
>Regards
>
>Chae