Computer Problems? Computing.Net has over 1,000,000 posts about all things technology related! Over 90% answered within 24 hours! Click here to start participating now! Also, be sure to check out the New User Guide.
Only Port 111?
Name: codemaster Date: August 2, 2008 at 13:35:47 Pacific OS: Ubuntu 8.04 CPU/Ram: AMD 64 3000+, 1024 D Product: Quantum Raiders
Comment:
Oddly enough, my Ubuntu server (I only have SSH access) was working fine last night. This morning, I was unable to connect to the server, so I ran nmap to see what was running - it seems only port 111 (rpcbind) was open.
Any idea how this happened and how I can regain access to this machine?
Thanks for any help
"Everything begins with Nu and everything ends with Nu. This is the truth! This is my belief... at least for now." - Mysteries of Life Volume 184 Chapter 26
Name: guapo Date: August 2, 2008 at 19:22:51 Pacific
Reply:
My guess is that sshd stopped running and has to be restarted. Run man sshd to learn how to restart it.
0
Response Number 2
Name: codemaster Date: August 2, 2008 at 20:04:38 Pacific
Reply:
The oddity is that there were numerous services on the machine and all of them stopped (presumably).
Is there any other way, you think, I could get into the machine (except manually, of course)?
"Everything begins with Nu and everything ends with Nu. This is the truth! This is my belief... at least for now." - Mysteries of Life Volume 184 Chapter 26
0
Response Number 3
Name: guapo Date: August 2, 2008 at 20:20:51 Pacific
Reply:
I don't see how you can have remote access with only that port opened. There was a port mapper exploit some years ago but I'm sure that's patched by now.
I use FreeBSD, so I'm not familiar with Ubuntu. If it happened to me on FreeBSD, I would be looking at /etc/inetd.conf which is where those services start.
0
Response Number 4
Name: codemaster Date: August 2, 2008 at 20:51:42 Pacific
Reply:
Thanks for your help. I am guessing the server just had a hiccup and needs to be restarted. I'll have to do this in a few weeks when I have physical access to the box.
"Everything begins with Nu and everything ends with Nu. This is the truth! This is my belief... at least for now." - Mysteries of Life Volume 184 Chapter 26
Summary: it depends on which type of the firewall u r using. but most of the firewall is almost the same. Yes, u need different rule/policy for all 3 type of interfaces. why? if u have 10.10.10.1 (local), 1.1...
Summary: I recently installed Sygate Personal Firewall Pro and for some odd reason, port 1025 was the only port that was OPEN and all others were STEALTH when i did the "SHIELDS UP" test at grc.com. I've alway...
Summary: yeah! thank you so much it worked i tried that zone alarm thing, is it enough to replace my other firewalls? like secure troy and mcafee? if i have zone alarm do i need a virus scanner? oh by the way...
0 
