What are these mystery ports doing on my Mac OS X server? Hmm… I like to run firewalls with a default allow policy, then only block services that are known to have troubles. That’s how the internet is intended to work, it just that there is a lot of shoddy code out there, so you have all these security issues that can be ameliorated using firewalls.
The only thing I could find about port 9010 is something called Communigate Pro. I don’t know what that is. Port 9010 does seem to understand HTTP… ah ha! It’s part of Apple’s Apache config, listed in /etc/httpd/httpd.conf:
## The default server is used for status on a special port
##
#ServerName www.example.com
Port 9010
Listen 9010
Apache is trustworthy, so I can leave that one open. So back to 1013. Back to the lovely lsof | grep 1013, and that gives me: /usr/sbin/mountd. My guess is that this is related to NFS, so that’ll definitely get firewalled.
Now I look at my other Mac OS X server, and there are more mystery ports. I think this is bad form on Apple’s part:
1010/tcp open unknown
1012/tcp open unknown
1013/tcp open unknown
3659/tcp open unknown
9010/tcp open unknown
Anyway, enough on that topic.
