[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
[cobalt-security] No telnet on saturdays??
- Subject: [cobalt-security] No telnet on saturdays??
 
- From: "Ervin Tarkhanian" <ervin@xxxxxxxxxx>
 
- Date: Sat, 11 Aug 2001 13:50:46 -0700
 
- List-id: Mailing list for users to address network security on Cobalt products. <cobalt-security.list.cobalt.com>
 
Hi All,
I was just trying to telnet in to on of my servers, but I couldn't connect,
no FTP & SMTP either.  All of the sites were visible through a browser, but
FTP, SMTP, and TELNET weren't working.  I did a port scan and came to find
that these were the only ports open:
#109     pop-2
#110     pop-3
#143     imap2
#444     snpp
#3306    mysql
Usually, these are the ports that are open on my server:
#21      ftp
#23      telnet
#25      smtp
#53      domain
#80      www/socks
#81      tproxy/kamanda
#110     pop-3
#143     imap2
#444     snpp
#3306    mysql
I've never encountered this during the week M-F, this happened on Saturday.
Is there some sort of maintenance RAQ4's do on Saturdays that close these
ports?
What logs should I be checking for any hack attempts?
Any comments or suggestions are appreciated.
Best regards,
Ervin