blocking remote telnet

"Jim Franz" <franz400-goaWJWIt5zpWk0Htik3J/[email protected]> Tue, 5 Jun 2007 22:54:27 -0400
Newsgroups gmane.comp.systems.as400.security
Message-ID <030701c7a7e5$ff83de10$a000be41@D3L5F1C1>
Customer's network admin swears firewall blocks port 23 (telnet, both tcp&udp).
I tested remotely from windows, and telnet appears blocked. 
But I have a couple pages of someone remotely trying to guess a password
for "root" and "admin" with existing virtual device names like qpadev0001.
My TCP Service table says telnet is 23.
No ssl configured, but telnet-ssl is port 992.
Is there another service or port to block ???
Netstat is showing several services listening that I don't recognize.
Any reference to all the services and what starts them?  
jim franz
_______________________________________________
This is the Security Administration on the AS400 / iSeries (Security400) mailing list
To post a message email: Security400-Zwy7GipZuJhWk0Htik3J/[email protected]
To subscribe, unsubscribe, or change list options,
visit: http://lists.midrange.com/mailman/listinfo/security400
or email: Security400-request-Zwy7GipZuJhWk0Htik3J/[email protected]
Before posting, please take a moment to review the archives
at http://archive.midrange.com/security400.