-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 On Tue, Aug 22, 2017 at 10:55:09AM +0200, to...@tuxteam.de wrote: > On Tue, Aug 22, 2017 at 10:31:03AM +0200, Rob van der Putten wrote: > > Hi there > > > > > > More stretch weirdness: > > Rkhunter alerts me to a hidden port. Restarting NFS changes the port > > number. Today I did a netstat after restarting NFS and then run > > unhide-tcp a few times: It's the client side of RPC NFS callback. > > What can I do about this? > > This is a bit thin on details, so just guessing from my side. RPC > traditionally uses a moving port, assigned by the port mapper.
Duh. Forgot to provide a link, sorry. Here it is: https://en.wikipedia.org/wiki/Portmap Cheers - -- tomás -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.12 (GNU/Linux) iEYEARECAAYFAlmb8doACgkQBcgs9XrR2kYjswCePDE5cBtgCBqNOanmlyZgzMFz GcYAn0jf2rOw+7noZQUn/4sh06J5ObnK =GYAL -----END PGP SIGNATURE-----