Perhaps this will help.

> -----Original Message-----
> From: [email protected] [mailto:[email protected]] On Behalf
> Of Rohit Yadav
> Sent: Monday, April 29, 2013 11:02 PM
> To: [email protected]
> Subject: Re: Typical Port Listing?
> 
> On Tue, Apr 30, 2013 at 3:58 AM, Mathias Mullins
> <[email protected]
> > wrote:
> 
> > Here's a full list the Rohit put up, and I've updated some up on the wiki.
> >
> https://cwiki.apache.org/confluence/display/CLOUDSTACK/Ports+used+by+
> C
> > loudS
> > tack
> >
> 
> We also list them on INSTALL.md:
> 
>     8080: API Server (authenticated), browser or CLI client to management
> server
>     8096: API Server (unauthenticated), browser or CLI client to management
> server
>     8787: Remote java debug debugging port, from IDE to management server
>     9090: Management server to management server
> (cluster)
>     7080: AWS API Server to which an AWS client can connect
>     80/443: HTTP client to Secondary Storage VM (template
> download)
>     111/2049: Secondary Storage to NFS
> server
>     3922: Port used to ssh/scp into system vms (SSVM, CPVM,
> VR)
>     8250: Agent (SSVM, CPVM, VR) to management server
>     22, 80, 443: XenServer,
> XAPI
>     22:
> KVM
>     443:
> vCenter
>     53:
> DNS
>     111/2049:
> NFS
>     3306: MySQL Server to which the management server connects
> 
> Cheers.
> 
> 
> >
> > On 4/29/13 5:16 PM, "Kelven Yang" <[email protected]> wrote:
> >
> > >If you are running mysql together with management server in one box,
> > >you will see mysql's port, you can add iptables rules to harden the
> > >access to your mysql server.
> > >
> > >Kelven
> > >
> > >From: Maurice Lawler
> > ><[email protected]<mailto:[email protected]
> > >>
> > >Reply-To:
> > >"[email protected]<mailto:[email protected]>"
> > ><[email protected]<mailto:[email protected]>>
> > >Date: Monday, April 29, 2013 2:11 PM
> > >To:
> "[email protected]<mailto:[email protected]>"
> > ><[email protected]<mailto:[email protected]>>
> > >Subject: Re: Typical Port Listing?
> > >
> > >I have never seen a server display MYSQL port openly like that. So,
> > >to me, that feels a little insecure and not very typical.
> > >
> > >
> > >
> > >On Apr 29, 2013, at 05:08 PM, Kelven Yang
> > ><[email protected]<mailto:[email protected]>> wrote:
> > >
> > >It is typical
> > >
> > >Kelven
> > >
> > >From: Maurice Lawler
> > ><[email protected]<mailto:[email protected]><mailto:
> > maurice.lawler
> > >@me.com<mailto:[email protected]>>>
> > >Reply-To:
> >
> >"[email protected]<mailto:[email protected]><mail
> to:
> > us
> > >[email protected]<mailto:[email protected]>>"
> >
> ><[email protected]<mailto:[email protected]><mai
> lto:
> > us
> > >[email protected]<mailto:[email protected]>>>
> > >Date: Monday, April 29, 2013 1:56 PM
> > >To:
> >
> >"[email protected]<mailto:[email protected]><mail
> to:
> > us
> > >[email protected]<mailto:[email protected]>>"
> >
> ><[email protected]<mailto:[email protected]><mai
> lto:
> > us
> > >[email protected]<mailto:[email protected]>>>
> > >Cc:
> > >"[email protected]<mailto:[email protected]><mailto:
> > chip.c
> > >[email protected]<mailto:[email protected]>>"
> >
> ><[email protected]<mailto:[email protected]><mailto:
> > chip.c
> > >[email protected]<mailto:[email protected]>>>
> > >Subject: Re: Typical Port Listing?
> > >
> > >I ran it from my local work station, against my primary IP address
> > >(the host node)
> > >
> > >
> > >
> > >On Apr 29, 2013, at 04:40 PM, Chip Childers
> >
> ><[email protected]<mailto:[email protected]><mailto:
> > chip.c
> > >[email protected]<mailto:[email protected]>>> wrote:
> > >
> > >On Mon, Apr 29, 2013 at 4:37 PM, Maurice Lawler
> > ><[email protected]<mailto:[email protected]><mailto:
> > maurice.lawler
> > >@me.com<mailto:[email protected]>>> wrote:
> > >> Hello:
> > >>
> > >> Is it typical when doing nmap -P0 to get the listing as follows:
> > >>
> > >>
> > >> 23/tcp filtered telnet
> > >> 111/tcp open rpcbind
> > >> 2049/tcp open nfs
> > >> 3306/tcp open mysql
> > >> 5900/tcp open vnc
> > >> 5901/tcp open vnc-1
> > >> 5902/tcp open vnc-2
> > >> 8080/tcp open http-proxy
> > >> 9090/tcp open zeus-admin
> > >>
> > >>
> > >> - Maurice
> > >
> > >What did you run it against?
> >
> >

Reply via email to