Image

Imageniccicam wrote in Imagelinux

RaQ4

Okay, so now I'm confused.... I'm trying to lock down my RaQ4. I did a scan and discovered that I have port 444 listening. Does anybody know why a RaQ4 would have port 444 listening?

[root@/root]$ nmap localhost

Starting nmap V. 2.53 by fyodor@insecure.org ( www.insecure.org/nmap/ )
Interesting ports on localhost (127.0.0.1):
(The 1515 ports scanned but not shown below are in state: closed)
Port State Service
21/tcp open ftp
22/tcp open ssh
25/tcp open smtp
53/tcp open domain
80/tcp open http
81/tcp open hosts2-ns
110/tcp open pop-3
444/tcp open snpp

Nmap run completed -- 1 IP address (1 host up) scanned in 1 second
[root@/root]$ fuser -n tcp 444 -u -v
444/tcp: 629 651 1174
[root@/root]$ ps -ef --cols 160 | grep 629
root 629 1 0 12:40 ? 00:00:01 /usr/sbin/httpd -f /etc/admserv/conf/httpd.conf
root 651 629 0 12:40 ? 00:00:00 /usr/sbin/httpd -f /etc/admserv/conf/httpd.conf
root 1174 629 0 12:45 ? 00:00:00 /usr/sbin/httpd -f /etc/admserv/conf/httpd.conf
root 10721 10577 0 14:17 pts/3 00:00:00 grep 629

So WTF is Apache listening on port 444? Port 444 is SNPP GDS! I'm running a RaQ4. If anybody knows WTF is going on please let me know! :-/