Re: Ports 111 and 5060?

[Manuel Bouyer <bouyer%antioche.eu.org@localhost>]

On Wed, Mar 07, 2012 at 01:56:26PM +0100, Jörn Clausen wrote:
> Hi!
> 
> Performing nmap on a fairly out-of-the-box NetBSD-5.1/i386 reports
> ports 111 and 5060 as "filtered":
> 
> PORT     STATE    SERVICE
> 22/tcp   open     ssh
> 111/tcp  filtered rpcbind
> 5060/tcp filtered sip
> 
> I was not able to find any process actually listening there (netstat,
> lsof), and I have neither started rpcbind via /etc/rc.d/*, nor
> installed any software that uses SIP. Who is listening on these ports?
> And why?

Maybe it's a router between your nmap host and your netbsd box which filter
these ports ? If's quite common to have these ports filtered at network edge.

or maybe nmap is too agressive and triggers the TCP reset limitation
defined by net.inet.tcp.rstppslimit

-- 
Manuel Bouyer <bouyer%antioche.eu.org@localhost>
     NetBSD: 26 ans d'experience feront toujours la difference
--