Ubuntu Security :: Unusual Port - 8081 - Is Open?
Jul 3, 2010I did a port scan on my own network and found the following port open on my Ubuntu:
Particularly, I have no idea what/why the following is open: 8081/tcp open blackice-icecap
ADVERTISEMENT
Ubuntu Security :: Tor Open Port 23 For Telnet
Apr 24, 2010Tor open port 23 for telnet. Is this normal ?
View 3 Replies View RelatedUbuntu Security :: Iptables Port 25 Is Open
Feb 28, 2011I've recently installed 10.10 server edition, and I must say it was a pleasant suprise, it's just the way I like it. I use it as a squeezebox-server. But I've run into a problem with the firewall. I did a portscan, which told me there are more ports open then I've told UFW to open. Among which port 25 and 119, when I telnet from another PC to those ports, the connection gets accepted, although there is no answer to any commands (as expected, there's no mail server running). Iptables print-outs also don't mention anything about the respective ports or a daemon that could be responsable, and the same applies to "ps -e" or "ps aux".
Iptables seems to be working, when I remove the rules to allow samba to work, I can't reach the shares, and when I insert them again I can reach the shares. "sudo ufw deny from any" as last rule doesn't change anything either (deny incoming is default (although I never issued the command "ufw status verbose" says it is) so it shouldn't, but ports 25 and 119 shouldn't be open either).
Ubuntu Security :: Router Has Open 5900 Port And Can't Close It?
Dec 19, 2010I've recently been taking a look at my router settings and I've realized i have my vnc port open for some reason. I don't know how or why it got opened because I've only used vnc within my private lan. Anyway, the problem is I couldn't figure out how to close that port on my router, so I just uninstalled all the vnc software from my computer so it wouldn't act like a vnc server for anybody trying to access it from the outside. So, effectively, I cannot vnc into my computer from outside my private lan, but when i port scan my public ip, the vnc port still appears open.
I'm wondering if there's something i'm missing. I'm sure it must be something in the router that I haven't figured out... something that's keeping port 5900 open.
Security :: Unusual Sm-msp-queue Log In Maillog?
Apr 25, 2010I'm running sendmail in FC6. For the last 3/4 days I'm geeting the following unusual message in my maillog:
Code:
Apr 25 04:03:54 mail sendmail[20827]: o3OLq515020827: from=<info@efcc.com>, size=8084, class=0, nrcpts=0, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
Apr 25 04:03:54 mail sendmail[20827]: o3OLq516020827: ruleset=check_mail, arg1=<info@efcc.com>, relay=localhost.localdomain [127.0.0.1], reject=451 4.1.8 Domain of sender address info@efcc.co
m does not resolve
Apr 25 04:03:54 mail sm-msp-queue[20769]: o3N6XIQd029543:
[Code]...
Ubuntu Security :: Unusual Folder Appearance Under Places?
Aug 10, 2010I'm not sure this is the correct place for this post, but since it involves a keyring, I'm making my best guess. Feel free to move it if I am in error. I have had a "tmp" directory appear under Places in the first grouping which contains "Home", "Deaktop", "Documents", etc. When I open this folder I find the attached png file.
When I look for this folder I find it is owned by root, but it appears in what should be my home directories. The only guess I have as to it's origin is that I recently formatted a USB stick as an encrypted device. I don't know if that is when it appeared or not.
Can anyone shed any light on what this folder is, and why it appears where it does? Somehow it just doesn't seem a correct placement.
Ubuntu Security :: Unusual Traffic From Amazon EC2 Cloud Server
May 1, 2011Last night my old Sony Vaio laptop which connects via wired Ethernet and runs Ubuntu 10.10 started hammering the network out onto the Internet. Fired up Wireshark and found lots of traffic between my machine and 174.129.193.12 which I did a whois on and found belonged to Amazon EC2 Cloud Server. The port on my machine was an unknown 5000+ but the port on the remote system was 443 the port used by https, however no browser was running. Did a search and put together a couple of iptable commands to block this IP address which stopped the traffic. I then used nmap and netstat and found port 3000 open and another connection to IP address 91.189.89.76 which I also blocked. Unusually no info exists on this IP when you do a whois. At first I thought it might be some sort of sync as this machine has Ubuntu One running on it, however it could also be something else.
View 3 Replies View RelatedFedora Security :: Unusual Warning Message Asking For Password?
Apr 9, 2011Sometimes when I try to open some chat application i get a strange warning message asking for password. The message is that /usr/libexec/mission-control is trying to gain access of the system, please provide the password. On top of the message box it shows "Unlock Keyring".
This very weird, as I am also unable to do a print-screen when this message box is up.
what this message is all about and what does the executable /usr/libexec/mission-control do?
I am using Empathy as my chat application
Networking :: How To Open A Port - Failed To Open The TCP Port Number In The License
Jun 20, 2009I am running lmgrd on CentOS5, but it returns Failed to open the TCP port number in the license. The port is 27000, how can I open that port?
View 5 Replies View RelatedSecurity :: Unusual Directories Appear On One Of Mounted Arrays - "samba_symlink_dir_traversal_nasl-#"
Jul 27, 2010I recently started having unusual directories appear on one of my mounted arrays. I did not create them (intentionally) and I have no clue what they are. They all have the this in the name of the folder "samba_symlink_dir_traversal.nasl-<10-digit number>" they all have the same time-stamp for the date modified column (see pic).
What are these folders? Why are they appearing? And how can I make it stop? It doesn't do this on my other mounted arrays and disks. I recently grew my two attached arrays, this started right after that, but only on one of them. Connection? Also, it may be relevant, the folders are different today in their modified date(reflecting today's date) and the numbers in the name of the folder are different too.
Ubuntu Security :: SSH Port Forwarding, Disable Or Edit A Forwarded Port?
Nov 1, 2010sudo ssh -L 750:192.168.123.103:873 username@192.168.123.103It does exactly what it's supposed to do, but how do i edit / remove this rule?Is there some config file where i can alter the forwarding? How does it get stored?Im using Ubuntu 10.10Server Edition (allthough i recon it would be pretty much the same across all versions
View 5 Replies View RelatedServer :: If Forward A Port In Iptables, Does The Port Have To Be Open On The Firewall
Aug 5, 2009If I forward port 80 to port 3128 for squid with an iptable rule, does port 3128 have to be open on the firewall or is this all routed behind the firewall?
View 4 Replies View RelatedSecurity :: Iptables: Verify Traffic On Port To Check If It Is Legitimate For That Port?
Apr 18, 2011Is there any way to verify if packets being trafficked over a certain port are valid for the service you want to use this port for?
One obvious example that probably clarifies my question:
When I open port 443 (outgoing or incoming) for https/ssl traffic, I don't want this port to be used for say openvpn traffic.
Thus: when someone wants to surf to a website with https, it should be ok but if someone wants to connect to his home openvpn server over that same port, it should be blocked.
Security :: Port-bind Shellcodes Work With Port-forwarding?
Apr 27, 2011I'll explain this in one sentence: Is it possible to program a port-binding shellcode in which people across the Internet can connect to, without being thwarted by the router blocking their data because the port its bound to doesn't allow port-forwarding
View 2 Replies View RelatedServer :: Open SMTP Port On Router (which Connects LAN To Internet) Also Needs To Open?
Apr 14, 2010I have sendmail running on my centOS 4.6. My lamp server also runs on it. I want to send mail through php mail function. when i execute php page, which fires the mail function, it takes so much long tim1 say even 1 minute, and at last displays that message sent successfully. Suppose, destination address is [URL].... I did not get any mail there. My server is running in LAN. I checked the status of sendmail, it shows me that it ios running. when i issue "nmap localhost" it shows me that SMTP port 25 is open, but when i issue "nmap myserver" (192.168.1.20 myserver ( written in hostfile)), it does not show that SMTP port is open.
I checked the /var/log/maillog, one person in my previous post advice me to see that. There it shows that message is accepted for delivery...but i do not get any mail in my destination, even not in spam folder. One more confusion is that, in my case my server is in LAN and if I am at all enable to open the SMTP port on it, does i need to open SMTP port on my router (which connects my LAN to internet) also needs to open? I think no, because SMTP is application layer protocol, it will wrap my mail in IP packet, which router just need to forward. am i right?
CentOS 5 :: Open Port 7001 But It Doesn't Show That Its Open?
Sep 26, 2010Ok For some reason I open my ports in security and firewall. I open ssh and other ports and port 7001 for example but when I go to check to see if they are open or try to connect to them. It shows that they are still closed. I am using - [URL] Also yes my ports are open on my router. I know my router works fine with opening ports because I have shoutcast setup on another computer with xp that is currently running. I am willing to pay for who can ever get this fixed for me...
I open the ports in graphical mode.
Ubuntu Security :: Router - Port Forwarding And Network Security
Nov 11, 2010As it stands I have a small home network operating behind my modem/router. Some of the ports on this are forwarded to my PS3 for gaming but I was looking at forward some for my file server.
At the moment I've forwarded port xxx22 to port 22 on my server for SSH for instance. ANd similarly 21 for FTP (although it doesnt seem to want to connect for any more than a few seconds using that). What I was thinking of doing was placing a small website for a handful of ppl to use on the server too and port forward again - xxx80 to 80. It works just fine but I'm a little concerned on the security front.
As I've moved the port to something different from the outside world I'm presuming I will have already cut the potential for malicious folks to wander in but is there anything else I should be doing? At the moment there's no firewall operating on the server, usually as its hidden behind the modem/router. But if I open this thign up more permanently what should I be doing? I've read a few articles on it but I'm always left with the overwhelming thought of "Thats if theres no firewall in my router" as they just seem to do the same.
Ubuntu Networking :: Cannot Open Port 80
May 23, 2010I just installed apache. I didn't change the configuration files at all except add Quote: # added servername to avoid the could not determine fqdn error ServerName myname.homelinux.org to apache2.conf. Apache is working locally (I get the `it's working' screen at [URL]). However, I cannot access my computer from an external computer by going to [URL], which is equivalent to [URL] -- [IP address changed slightly for privacy] Here is a screenshot to my router settings. I disabled the filter for port 80 on the router. here shouldn't be a firewall, unless it's automatically installed with ubuntu 10.4. (sudo ufw status says `inactive'.)
I checked my ports from [URL] and indeed port 22 is open (ssh-ing into my computer externally is not a problem), whereas port 80 is closed. What step in opening up port 80 am I missing? (I also made sure my ISP isn't blocking port 80.)
Ubuntu :: Cannot Open Port 5900
Sep 17, 2010I am trying to access my desktop remotely via VNC. I can already access my computer using ssh, and I managed to open port 22 on my router:
Now I must open port 5900 for VNC, and I think I did exactly the same thing:
Using [url](a port check service), however, my port 22 is OPEN and my port 5900 is CLOSED. Yes, I restarted my router after making the changes.
Servers :: Can I Open Port On Ubuntu 9
Oct 11, 2010I can seem to open port 25565 for a java application (executable jar)
I'm running ubuntu server 9 thoroughly up to date code...
Yet connections to port 25565 fail when I have the firewall enabled (sudo ufw enable)
For example canyouseeme.org says "Error: I could not see your service on port (25565) Reason: Connection timed out"
And connections to port 25565 _DO WORK_ when I disable the firewall (sudo ufw disable)
canyouseeme.org says "Success: I can see your service on port (25565)"
General :: Set Ubuntu To Open One Port?
Dec 12, 2009I heard when running Ubuntu I need to set it to open with one port. I had a friend ran Ubuntu on his laptop at school and had other Ubuntu users at school got access to his computer, is that possible?
View 2 Replies View RelatedUbuntu Networking :: Open A Port For VirtualBox OSE?
Mar 13, 2010needing to open a port in ubuntu, then use it for my VirtualBox Pc.My VirtualBox is running - Windows XP I have a router connected to my network - Linksys WRT54G Now lets begin, I have tried opening via there router homepage. But when I go to [URL] and test port 4900 is still says that it is closed.
View 3 Replies View RelatedUbuntu Servers :: Ssh Is Running But Port 22 Not Open
Jul 10, 2010I have two computers on a LAN. (This is history not a Bazaar question, although I have one of those too) One of them (Ubuntu 9.04) Im using as a Bazaar repository over sftp. Its been working fine for about a year. Then we had a thunderstorm that knocked out our Internet service for a couple of days. When it came back up everything is working fine accept I could no longer commit to the server. A little detective work showed that ssh was not running on the server. I started it and Bazaar then couldnt find the repository files. I still suspected an ssh problem, but port scans from both computers showed port 22 open on the server and I could do a ssh login from the client ok. Then I started fiddling with ssh on the server and now I have ssh problems on top of the Bazaar problems.
On the server I deleted then regenerated the ssh keys. Ive done
sudo /etc/init.d/ssh reload
sudo /etc/init.d/ssh start
I get a normal starting message and ps ef |grep ssh
shows /usr/sbin/sshd running. But the port scan does not show 22 open and I get connection refused at the client.
Ubuntu Networking :: Port Will Not Open Regardless Of Methods
Aug 18, 2010No matter what I do, i cannot get port 3100 to open. This is for a new MMO i am CBT on. I know it works on windows because that is how I installed it and played. But I prefer being on Linux. Majority of all other MMOs work fine. Just this one has to have udp 3100 open.
The following is a rough output of all the methods I have tried with no success. As you can see I have done some extensive research first before posting here.
Now its become a lil bit of an obsession.
I cannot get the following command to work:
And yes I tried the "spaces" in different places thinking that was the prob. So i cannot see if 3100 is in the list or not
I eventually turned on the firewall "ufw enable" add the port there, and output:
Some references
[url]
Firewall stuff: [url]
I even manually went into the router and turned it on there.
I add these lines for startup purposes.
Do I need to do something in "wine" ?
I feel i am starting to repease myself
results of "iptables -L"
Code:
Ubuntu Servers :: Check If A Port Is Open For A Ip?
Sep 8, 2010Is it possible to check if a particular port is open for a particular ip in the terminal?
View 4 Replies View RelatedUbuntu Networking :: Open Port 22 In The Router?
Dec 16, 2010I have an n900 phone and I'm trying to ssh to my desktop but I'm getting an error:
ssh: connect to host 58.xx.xx.xx port 22: Connection refused
I recently started using a router for I wanted to connect to net even with n900. I've tried to open the port from the setup page of the router however it doesn't seem to work. (find below the screenshot of setup page).
I've tried to ssh through slackware I've got as a virtual machine and I have the same problem although I was able to ssh through slackware before I started using the router.
Ubuntu Security :: No More Open WiFi / Fire Sheep Make Hacking Open WiFi Breexe
Nov 2, 2010no more open wifi -- fire sheep make hacking open wifi a breexe.starbuck and Micky d's are open to the fire sheep.
View 3 Replies View RelatedGeneral :: How To Open A Port
Jul 23, 2010I hear that it's a bad idea to edit iptables by hand.
I want to open 443. Quote: iptables -A INPUT -p tcp -m tcp --sport 443 -j ACCEPT
iptables -A OUTPUT -p tcp -m tcp --dport 443 -j ACCEPT
Since I'm not at the box, I can't use the nifty GUI.
How might one do this via terminal?
OS: CentOSv5 (RHELv5)
General :: How To Open Port?
Apr 28, 2011i have centos5.3 installed with iptables firewall, i want to open port 5222 as i want to access application which uses port 5222 from internet.
View 14 Replies View RelatedGeneral :: Open Certain Port With Vnc
Jun 10, 2010from my windows box at work i can only connect to some ports (pop3, telnet, web)also, i can connect to port 1234 (as an example)everything else is blocked.I'm trying to connect with Microsoft Terminal Service Client to my linux box (cant install any vnc)but haven't found a way to make Gnome remote desktop to listen to the port i need (1234).I'm using fedora 13.anyway, i would appreciate any advice on what software to use or hot to configure my Linux box get remote connections from windows box on that certain port.
View 5 Replies View Related