Firewall Wizards mailing list archives

Re: UDP Port 137 - Now TCP 143

From: "Michael T. Shinn" <mike () shinn net>
Date: Mon, 08 Feb 1999 15:20:23 -0500

"Burgess, John (EDS)" wrote:


Thanks to all who responded regarding UDP port 137.  I learned some
interesting facts.  I got a new one this morning.  Does anyone know why
would someone/something be hitting TCP port 143?  This was at 2:30 AM
from bay-030-b5.codetel.net.do (206.105.238.30 - Dominican Republic - a
router?) Protocol=TCP Port 2734->143?


Probably looking for IMAP servers (which runs on port 143/tcp).  This
*same* box hit several of our boxes too on port 143(tcp).

--
Michael T. Shinn                                 PGP Key: 08EDF1B1 
ech`echo xiun|tr nu oc|sed 'sx\([sx]\)\([xoi]\)xo l\2nu\1 \2s xg'`ol
Key fingerprint: 69C7 88A0 6977 952D 958B D409 FD43 6257 08ED F1B1

Current thread:

UDP Port 137 - Now TCP 143 Burgess, John (EDS) (Feb 06)
- Re: UDP Port 137 - Now TCP 143 Lorens Kockum (Feb 08)
  - Re: UDP Port 137 - Now TCP 143 John Ladwig (Feb 09)
- Re: UDP Port 137 - Now TCP 143 Cristiano Lincoln Mattos (Feb 08)
- Re: UDP Port 137 - Now TCP 143 Randy Witlicki (Feb 08)
- Re: UDP Port 137 - Now TCP 143 Daniel J. Gregor Jr. (Feb 08)
- Re: UDP Port 137 - Now TCP 143 Michael T. Shinn (Feb 09)
- <Possible follow-ups>
- Re: UDP Port 137 - Now TCP 143 Bill_Royds (Feb 08)
  - Re: UDP Port 137 - Now TCP 143 David Gillett (Feb 10)
    - RE: UDP Port 137 - Now TCP 143 David Bovee (Feb 11)