Javier Fernández-Sanguino Peña <jfs@computer.org> writes: > Is the first open port reasonable? I wonder why named is listening on UDP > port 32770 which, after a brief google search, comes up as a port usually > used by Solaris' rpcbind (which used to be vulnerable). IIRC, this port (could be any 32xxx) is for replies from other name servers. Regards, Olaf.