[Leaplist] help with IPCop Connections table

Ray Brunkow ray at brunkow.ws
Fri May 22 16:22:03 EDT 2009


If I am reading this correctly then my network is trying to send data 
OUT via some very high ports.

udp (17)      19              10.213.160.1  :67        255.255.255.255  :68        255.255.255.255  :68        10.213.160.1  :67      [UNREPLIED]      1

udp (17)     20         24.28.81.56 :54629     68.204.84.170 :25000     192.168.2.150 :25000     24.28.81.56 :54629     [UNREPLIED]     1

udp (17)     126         68.204.84.170 :32769     65.32.5.111 :53     65.32.5.111 :53     68.204.84.170 :32769     [ASSURED]     1

tcp (6)     3     TIME_WAIT     68.204.84.170 :32781     204.13.248.112 :80     204.13.248.112 :80     68.204.84.170 :32781     [ASSURED]     1

The ports that concern me at udp (17) 126 my IP:32769.  Now I blocked the tcp, ill be blocking the udp in a bit, but what is sending OUT that port?  a fast google 
scan came up with nothing listed as that port.  the :25000 is my torrent client as i have just downloaded the newest OOo for my iMAC.

/sbin/iptables -A OUTPUT -p tcp --dport 32700:32800 -j DROP

is the line i used to block the tcp, ill use the same for the udp.

Thanks for the help/input/info.

-- 
Raymond L. Brunkow
5th Degree Black Belt
Certified Instructor
Choong Sil Kwan TaekwonDo Federation


-- 
This message has been scanned for viruses and
dangerous content by MailScanner, and is
believed to be clean.

-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.leap-cf.org/pipermail/leaplist/attachments/20090522/34c8f261/attachment.html


More information about the Leaplist mailing list