Why is port 427 open?

[michaelsanford]

This didn't quite answer my question, as there is no service report for port 427 on my machine.
Open ports...

However, I would still like to know why the Jag firewall configuration panel opens 80 and 427 for personal web sharing.

[bobw]

80 HTTP (Web) RFC 2068, .Mac, Sherlock, QuickTime Installer

427 SLP (service location)

[bluehz]

(from AFP548.com)
Joel resonded: You are correct that the SLP daemon is causing this traffic. You are most likely generating this packets whenever you fileshare. By selecting "local network" in the "Go to" window to connect to a server, you are instigating an SLP lookup to search for services available to you on the network. This should not be a huge waste of bandwith, especially on a 100-base network. However, to completely disable this from happening, you can probably remove slpd from /usr/sbin/slpd. (Or, comment it out of /etc/services.) That will certainly stop this from happening. I don't know how that will impact your system, but you should be ok.

239.255.255.235 is the multicast address that SLP uses to try and contact other SLP devices.

http://www.afp548.com/Questions/20020531.html

---

some references

http://www.opendoor.com/doorstop/ports.html
http://www.iana.org/assignments/port-numbers

find out what ports are doing this in the terminal:

% cat /etc/services | grep 427
svrloc 427/tcp #Server Location
svrloc 427/udp #Server Location

[michaelsanford]

Aha! Thanks guys!

[ksv]

Check out http://docs.info.apple.com/article.html?artnum=106439 too, pretty useful list

[michaelsanford]

Thanks, much nicer than the IANA port-list

[glenfarclas]

Check in /etc/services (using a terminal), these are the ones that MacOSX uses, its a long list. Only ones that are uncommented are currently being used.

[michaelsanford]

Yeah I check services first, but I was wondering why it was necessary to have that port open, since I've never opened it in concert with Apache before....