Re: ACMSODA? Why does nmap report this scanning -current?

[Stephen Marley <stephen_(_dot_)_marley_(_at_)_catwoman_(_dot_)_cl-is_(_dot_)_com>]

On Sun, Dec 19, 2004 at 02:03:06AM -0800, Geoff White wrote:
> I just built a firewall from a snapshot (sept 17) of current that I had 
> lying around.  I pointed nmap at it after I had got my pf rules tuned up 
> and this is what I got...  (the ip addresses have been changed)
> 
> Starting nmap 3.30 ( http://www.insecure.org/nmap/ ) at 2004-12-18 22:09 PST
> Host ecotopia.xxxxx.net (64.81.228.130) appears to be up ... good.
> Initiating SYN Stealth Scan against ecotopia.xxxxxx.net (64.81.228.130) at 
> 22:09
> Adding open port 22/tcp
> The SYN Stealth Scan took 4 seconds to scan 1644 ports.
> Interesting ports on ecotopia.nexsys.net (64.81.228.130):
> (The 1642 ports scanned but not shown below are in state: closed)
> Port       State       Service
> 22/tcp     open        ssh
> 6969/tcp   filtered    acmsoda
> 
> 
> what the hell is acmsoda, doing a google makes it even more mysterious.
> This system is literally 3 hours old.  Anybody have a clue?

Your ISP is filtering port 6969.

-- 
Network Systems Engineer, Datacentre Operations
Campbell Lee Internet Solutions <http://cl-is.com>

________________________________________________________________________
This e-mail has been scanned for all viruses by Star. The
service is powered by MessageLabs. For more information on a proactive
anti-virus service working around the clock, around the globe, visit:
http://www.star.net.uk
________________________________________________________________________