Re: WinXP integrated packet filtering

From: Maxime Ducharme (maxime@pandore-design.com)
Date: Mon Sep 30 2002 - 14:18:29 PDT

Next message: Matt Barton: "IIS Using Port 1843"

Previous message: Christopher Albert: "Re: Unusual volume: UDP:137 probes"
Next in thread: Keith T. Morgan: "RE: Increase in SSH scans"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

Hi again,
    thanks all for quick answer !

Mister "admin" here is true, i'm currently using PPPoE link.

I was wondering why XP was letting a port trought even
when i said 'no you don't.

netstat -ano & fport didnt find anything on this port on the
XP system, if anyone have any idea of what is on this
port plz lemme know.

Maybe something is listening directly on the PPPoE modem,
i think the product's name is "SpeedVista" (I say i think since
i'm not on this computer right now).

I'll try to find something tonight, i'll let you know if I find
anything.

Thanks again to all !

---------------------------------------------------------------
  Maxime Ducharme
  Administrateur reseau, Programmeur
  E-Mail : maxime@pandore-design.com
  Clé publique PGP : http://pandore-design.com/pgp/maxime.asc
  Pandore-Design [http://www.pandore-design.com]
  Tel : (866) 961-9321
  Fax : (866) 961-9943


----- Original Message -----
From: "Security Administrator" <securityat_private>
To: "Maxime Ducharme" <maxime@pandore-design.com>
Sent: Monday, September 30, 2002 6:00 PM
Subject: Re: WinXP integrated packet filtering


Hello, Maxime Ducharme,

I am not 100% sure but I think it has to do with the fact that you are
probably on a PPPoE connection and that port is thru a CIsco Router of some
sort

======= At 2002-09-30, 10:36:00 you wrote: =======

>Hi all,
>    i'm kinda new to this list and just installed winxp.
>
>After enabling packet filetring on my ppp interface (dsl)
>in WinXP built-in options, i notice nmap always finds
>the same open TCP port :
>
>15318/tcp  open        unknown
>
>Anyone know what's behind this ?
>
>Tia
>
>---------------------------------------------------------------
>  Maxime Ducharme
>  Administrateur reseau, Programmeur
>  E-Mail : maxime@pandore-design.com
>  Clé publique PGP : http://pandore-design.com/pgp/maxime.asc
>  Pandore-Design [http://www.pandore-design.com]
>  Tel : (866) 961-9321
>  Fax : (866) 961-9943
>
>
>
>
>---------------------------------------------------------------------------
-
>This list is provided by the SecurityFocus ARIS analyzer service.
>For more information on this free incident handling, management
>and tracking system please see: http://aris.securityfocus.com
>
>.

= = = = = = = = = = = = = = = = = = = =


Best regards.
Security Administrator
securityat_private
2002-09-30






----------------------------------------------------------------------------
This list is provided by the SecurityFocus ARIS analyzer service.
For more information on this free incident handling, management 
and tracking system please see: http://aris.securityfocus.com

Next message: Matt Barton: "IIS Using Port 1843"
Previous message: Christopher Albert: "Re: Unusual volume: UDP:137 probes"
Next in thread: Keith T. Morgan: "RE: Increase in SSH scans"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

This archive was generated by hypermail 2b30 : Mon Sep 30 2002 - 18:56:05 PDT