[Leaplist] help with IPCop Connections table

[Ray Brunkow]

William A. Mahaffey III wrote:
> Ray Brunkow wrote:
>> If I am reading this correctly then my network is trying to send data 
>> OUT via some very high ports.
>>
>> udp (17)      19              10.213.160.1  :67        255.255.255.255  :68        255.255.255.255  :68        10.213.160.1  :67      [UNREPLIED]      1
>> udp (17)     20         24.28.81.56 :54629     68.204.84.170 :25000     192.168.2.150 :25000     24.28.81.56 :54629     [UNREPLIED]     1
>> udp (17)     126         68.204.84.170 :32769     65.32.5.111 :53     65.32.5.111 :53     68.204.84.170 :32769     [ASSURED]     1
>> tcp (6)     3     TIME_WAIT     68.204.84.170 :32781     204.13.248.112 :80     204.13.248.112 :80     68.204.84.170 :32781     [ASSURED]     1
>>
>> The ports that concern me at udp (17) 126 my IP:32769.  Now I blocked the tcp, ill be blocking the udp in a bit, but what is sending OUT that port?  a fast google 
>> scan came up with nothing listed as that port.  the :25000 is my torrent client as i have just downloaded the newest OOo for my iMAC.
>>
>> /sbin/iptables -A OUTPUT -p tcp --dport 32700:32800 -j DROP
>>
>> is the line i used to block the tcp, ill use the same for the udp.
>>
>> Thanks for the help/input/info.
>> -- 
>> Raymond L. Brunkow
>> 5th Degree Black Belt
>> Certified Instructor
>> Choong Sil Kwan TaekwonDo Federation
>>   
>>
>> -- 
>> This message has been scanned for viruses and
>> dangerous content by *MailScanner* <http://www.mailscanner.info/>, 
>> and is
>> believed to be clean.
>> ------------------------------------------------------------------------
>>
>> _______________________________________________
>> Leaplist mailing list
>> Leaplist at leap-cf.org
>> http://lists.leap-cf.org/mailman/listinfo/leaplist
>>   
>
>
> nose around a bit in your /etc/services file, mine shows:
>
>
> [root at athloncube:/etc, Thu May 21, 05:14 PM] 1208 # grep 32769 services
> filenet-rpc     32769/tcp               # Filenet RPC
> filenet-rpc     32769/udp               # Filenet RPC
> [root at athloncube:/etc, Fri May 22, 04:11 PM] 1209 #
>
>
> -- 
>
> 	William A. Mahaffey III
>
>  ----------------------------------------------------------------------
>
> 	"The M1 Garand is without doubt the finest implement of war
> 	 ever devised by man."
>                            -- Gen. George S. Patton Jr.
>   
>
> -- 
> This message has been scanned for viruses and
> dangerous content by *MailScanner* <http://www.mailscanner.info/>, and is
> believed to be clean.
> ------------------------------------------------------------------------
>
> _______________________________________________
> Leaplist mailing list
> Leaplist at leap-cf.org
> http://lists.leap-cf.org/mailman/listinfo/leaplist
>   
Thank you, after a bit o google search I now see that filenet is not a 
bad thing.

-- 
Raymond L. Brunkow
5th Degree Black Belt
Certified Instructor
Choong Sil Kwan TaekwonDo Federation


-- 
This message has been scanned for viruses and
dangerous content by MailScanner, and is
believed to be clean.

-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.leap-cf.org/pipermail/leaplist/attachments/20090522/65e4a64b/attachment.html