<HTML>
<HEAD>
<META content="text/html; charset=iso-8859-1" http-equiv=Content-Type>
<META content="OPENWEBMAIL" name=GENERATOR>
</HEAD>
<BODY bgColor=#ffffff>
That's the way it worked for me Michael.
<br />
<br />They just port scan the IP, and look up what usually runs on that port. I had some stuff running on odd-ball ports on the router in front of the server. Their port scan detected the ports, and refused to pass the PCI Compliance until I shut it down.
<br />
<br />In my case, they couldn't even have checked for a response, to see what prompt or response came back (and guess the service/program from that) - because it was encrypted. But they saw they could make a connection to those odd-ball ports, and that was enough for them to say NO WAY!
<br />
<br />
<br />Chuck
<br />
<br />
<br /><font size="2"><b>---------- Original Message
-----------</b>
<br />
From: Michael Stauber <mstauber@blueonyx.it>
<br />
To: blueonyx@mail.blueonyx.it
<br />
Sent: Thu, 30 Aug 2018 12:10:04 -0500
<br />
Subject: [BlueOnyx:22364] Re: PCI - lighttpd
<br />
<br />> Hi Tim,
<br />>
<br />>
> Here is the report from doing
<br />>
>
<br />>
> netstat -tupan|grep LISTEN
<br />>
>
<br />>
> Nothing for port 42443
<br />>
>
<br />>
> Correct?
<br />>
<br />>
Correct.
<br />>
<br />>
> Could nginx be effecting their PCI scans?
<br />>
<br />>
No. When you acticate Nginx, Apache releases port 443 and Nginx binds to
<br />>
port 443. Port 42443 isn't involved in that.
<br />>
<br />>
I wonder how they came to the conclusion that lighttpd was running on
<br />>
port 42443. Did they have access to the server for the check? If not,
<br />>
then all they could do was a portscan, which is not really conclusive
<br />>
without further analysis of what was going on at that port.
<br />>
<br />>
--
<br />>
With best regards
<br />>
<br />>
Michael Stauber
<br />>
_______________________________________________
<br />>
Blueonyx mailing list
<br />>
Blueonyx@mail.blueonyx.it
<br />>
<a href="http://mail.blueonyx.it/mailman/listinfo/blueonyx" target="_blank">http://mail.blueonyx.it/mailman/listinfo/blueonyx</a>
<br /><b>------- End of Original Message
-------</b>
<br />
</font>
</BODY>
</HTML>