Re: [Fwd: RE: Application for port-number (1026)]

[Doug Royer <Doug@xxxxxxxxx>]

Andrew Davison wrote:
> 
> I just installed WIN2K Service Pack 3 (SP3) today and guess what? It has
> started using port 1026 for it's own inscrutable reasons! It opens that
> port early on (among many others) on all interfaces,  and it definitely
> is not a calendar server. I assume it started using port 1025, then 1026
> etc. as ephemeral ports but for listening. The same probably exists in
> WINXP as i believe a lot of stuff was back ported to WIN2K in SP3. I
> have been through all stoppable services and nothing i could find would
> disable it. Nor have i been able to find any information on it at
> microsoft.com so perhaps someone is in a position of knowledge and could
> comment.

Port 1026 is currently registered with IANA for CAP.

As to what MS is doing with that port, some checking shows
me that NT runs mstask.exe on port 1026, what ever that is.

There are several reported hack attempts to bring an NT
box down via some bug using 1026. The reading also shows
me that mstask.exe starts at 1025 and starts looking
for unused ports. I do not know the NT flavor of the MS
OS's, but if that is true, start your CAP server first
then it will find the first unused port after that.

-Doug

begin:vcard 
n:Royer;Doug
tel;pager:pager@xxxxxxxxx
tel;cell:208-520-4044
tel;fax:866-594-8574
tel;work:866-594-8574
x-mozilla-html:FALSE
url:http://Royer.com/People/Doug
org:http://INET-Consulting.com
adr:;;1795 W. Broadway #266;Idaho Falls;Idaho;83402;U.S.A.
version:2.1
email;internet:Doug@xxxxxxxxx
title:Chief Executive Manager
x-mozilla-cpt:;12704
fn:Doug Royer
end:vcard