Every now and then lately I've been nmapping my servers and finding ports 513 and 514 open, but when I login and lsof, nothing is there. It finally spooked me enough the other night that I used Tektonic's live chat, and a guy named Jason assured me he couldn't see it from where he was, outside the data center. So then I suspected Comcast. But it turns out it was only happening while in coLinux, not when booted directly into Linux. Something to do with Slirp, I guess.

Doesn't mean my servers haven't been rooted, but at least they weren't cracked by some careless fool who leaves ports open.

Back to blog or home page

last updated 2010-11-21 15:01:25. served from tektonic.jcomeau.com