[Xitami] Suspend

Michael xitami@lists.xitami.org
Wed, 5 Sep 2001 07:36:04 -0400


On 5 Sep 2001, at 22:45, Ewen McNeill wrote:

> In message <001501c135ed$a4e11420$86919fc1@ednic>, Joubin Far writes:
> >I didnīt install IIS-Server but i have installed Visual Studio.net Beta 2.
> 
> Ah, that's possibly installed a webserver as part of its test environment.
> 
> >[netstat -na shows]
> >TCP        0.0.0.0:21       0.0.0.0       heard
> >TCP        0.0.0.0:25       0.0.0.0       heard
> >TCP        0.0.0.0:80       0.0.0.0       heard
> 
> The :80 one is the important one; it's the webserver port (by common
> convention).  So you've definitely got _something_ which is running as a
> webserver.  (And also a FTP server, and also a mail server.)
> 
> I believe there are some third party programs which can tell you for a
> given network port, or file, which programs have it open, but off hand I
> don't know of any of them.  (Under linux/unix there is "lsof" (list open
> files) which does this; I'm pretty sure there's a Windows equivilent.)

If all else fails, a simple firewall (like ZoneAlarm) will alert people which 
program is attempting to use the internet.  Even if a suspect program 
loads dormant, when someone attempts to connect to the ports in 
question some kind of warning message should pop up.

Visual Studio doesn't run a server or open ports without obvious effort.

However, running W2K with ports 21, 25 and 80 exposed and they didn't 
realize it?  Their face is probably (code) red from exposure.  <g>


~Michael