New admin now port 6112 open hmmm

[LAT]

What would your company do?

Is there a legitimate business reason for this port to be opened on the firewall?

[bwkaz]

Is that tcp/6112 or udp/6112? Because those are actually different. There is no such thing as "port 6112"; the port number is a construction of either the TCP or UDP protocol, so you have to specify which protocol you're talking about. ;)

I'm going to assume that you meant tcp/6112, because TCP is almost always what people scan for. According to the IANA (http://www.iana.org/assignments/port-numbers), tcp/6112 and udp/6112 are assigned to "dtspcd", which I've never heard of before.

But according to a Google search for "tcp port 6112":

http://www.google.com/search?hl=en&q=tcp+port+6112&btnG=Google+Search

it seems to be mostly related to Battle.Net -- some people claim it's tcp/6112 and udp/6112, while others claim it's UDP only. (Good job Blizzard, you're using unregistered port numbers. Duh. Sigh.) I assume your company doesn't allow multiplayer gaming, right? ;)

However, one page from that search (http://www.counterpane.com/alert-cde.html) mentions that dtspcd is some kind of daemon on some CDE systems, which had a remote code execution issue several years back. No idea what the program actually does though (the description given there, while present, is a little vague).

[soulestream]

the old admin(s) may have just picked that port out of the air for RDP, VNC, SSH, or something they needed remote access for. If you are the one in charge now, close it, see what breaks (or check for documentation). Many admins will but a back door on systems when they leave. In case the get screwed or are just wanting to be harmful. So i would diffently close it.

Im also assuming your saw that port actually open on the firewall and didnt just look at traffic in front of the firewall.

Soule

[LAT]

Thanks guys. Just wanted to make sure I wasn't going off my rocker when I go and tell him to close it. Yes, it has been set in the firewall and my googling indicated it is for gaming.

bwkaz...you are a lesson in homework! Now I feel compelled to go and [try] to really understand the difference between tcp and udp sigh ;)