[LDM #SWP-583361]: Opening port 388

Evan,

> There is no "/etc/sysconfig/iptables" file on my machine. There is a
> "/etc/sysconfig/iptables-config" file however which doesn't say much.
> 
> Thus I ran "netstat -tulpn | less" and got the following result:
> 
> Active Internet connections (only servers)
> Proto Recv-Q Send-Q Local Address               Foreign
> Address             State       PID/Program name
> tcp        0      0 0.0.0.0:56163
> 0.0.0.0:*                   LISTEN      1836/rpc.statd
> tcp        0      0 0.0.0.0:388
> 0.0.0.0:*                   LISTEN      12435/rpc.ldmd
> tcp        0      0 0.0.0.0:111
> 0.0.0.0:*                   LISTEN      1817/portmap
> tcp        0      0 127.0.0.1:50000
> 0.0.0.0:*                   LISTEN      2069/hpiod
> tcp        0      0 127.0.0.1:50002
> 0.0.0.0:*                   LISTEN      2075/python
> tcp        0      0 127.0.0.1:631
> 0.0.0.0:*                   LISTEN      2086/cupsd
> tcp        0      0 :::22
> :::*                        LISTEN      2098/sshd
> udp        0      0 0.0.0.0:32768
> 0.0.0.0:*                               1836/rpc.statd
> udp        0      0 0.0.0.0:32769
> 0.0.0.0:*                               2228/avahi-daemon:
> udp        0      0 0.0.0.0:740
> 0.0.0.0:*                               1836/rpc.statd
> udp        0      0 0.0.0.0:5353
> 0.0.0.0:*                               2228/avahi-daemon:
> udp        0      0 0.0.0.0:111
> 0.0.0.0:*                               1817/portmap
> udp        0      0 0.0.0.0:631
> 0.0.0.0:*                               2086/cupsd
> udp        0      0 :::32770
> :::*                                    2228/avahi-daemon:
> udp        0      0 :::5353
> :::*                                    2228/avahi-daemon:
> 
> So port 388 appears to be open. I checked my version of Linux:
> 
> Linux version 2.6.20-1.2316.fc5smp
> (address@hidden) (gcc version 4.1.1 20070105
> (Red Hat 4.1.1-51)) #1 SMP Fri Apr 27 20:34:56 EDT 2007
> 
> I don't understand why another machine on this network only sees ports
> 22 and 111 open!

This is a puzzle.

Would you please send me the output from the following commands:

    /sbin/iptables -L
    cat /etc/hosts.allow

> Best,
> Evan

Regards,
Steve Emmerson

Ticket Details
===================
Ticket ID: SWP-583361
Department: Support LDM
Priority: Normal
Status: Closed