?
Solved

UDP ports, almost all are open

Posted on 2013-11-02
5
Medium Priority
?
454 Views
Last Modified: 2013-11-08
hi all,

running server 2003 w/ exchange 2003

running a netstat -aa and readout is ALARMING!

there are atleast 200 random ports like -

UDP   server:5852    *.*
UDP   server:1594    *.*

the only services that are Port forwarded from firewall are 25, 80, 443, 3389


where can i start looking?
0
Comment
Question by:Mutogi
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 3
  • 2
5 Comments
 
LVL 9

Expert Comment

by:Mike
ID: 39619251
When you say firewall, do you mean Windows firewall or network firewall?

Also, is your antivirus/antimalware on the server up to date?
0
 
LVL 3

Author Comment

by:Mutogi
ID: 39619259
yes, i use Vipre business and upto an hour ago yes.

firewall/routor is Untangle, new install from scratch and new harddrive
0
 
LVL 9

Assisted Solution

by:Mike
Mike earned 750 total points
ID: 39619263
So it's a separate firewall.

I would check the logs in untangle and see what traffic is going/coming from the IP of the server.  If you have no software firewall enabled on the sever it will still have all it's ports open but untangle will filter which ports go to the outside and come in to the inside.
0
 
LVL 3

Accepted Solution

by:
Mutogi earned 0 total points
ID: 39619960
after all the work with finding this rouge 512byte packets being sent out on broadcast i was able to use colasoft packet capture and find the mac that was doing it.

Our Hopper from DISH must have a bad card or software, unplugged it network is very quite indeed.

sorry dish your fired!
0
 
LVL 3

Author Closing Comment

by:Mutogi
ID: 39632967
after all the work with finding this rouge 512byte packets being sent out on broadcast i was able to use colasoft packet capture and find the mac that was doing it.

Our Hopper from DISH must have a bad card or software, unplugged it network is very quite indeed.

sorry dish your fired!
0

Featured Post

On Demand Webinar: Networking for the Cloud Era

Ready to improve network connectivity? Watch this webinar to learn how SD-WANs and a one-click instant connect tool can boost provisions, deployment, and management of your cloud connection.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Have you ever had a hard drive that you can't boot into, but need to change the registry? Here is the solution! This article guides you through accessing and editing a registry of a non-primary drive. To read registry information on a non-prim…
Imagine you have a shopping list of items you need to get at the grocery store. You have two options: A. Take one trip to the grocery store and get everything you need for the week, or B. Take multiple trips, buying an item at a time, to achieve t…
This video Micro Tutorial explains how to clone a hard drive using a commercial software product for Windows systems called Casper from Future Systems Solutions (FSS). Cloning makes an exact, complete copy of one hard disk drive (HDD) onto another d…
Windows 8 came with a dramatically different user interface known as Metro. Notably missing from that interface was a Start button and Start Menu. Microsoft responded to negative user feedback of the Metro interface, bringing back the Start button a…
Suggested Courses

752 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question