Port 5001

[Sven Prevrhal]

Hi there, on XNAT 1.6.2.1, I scanned my ports with nmap, and it showed me port 5001 is open after XNAT was installed:

22/tcp   open  ssh
25/tcp   open  smtp
80/tcp   open  http
443/tcp  open  https
5001/tcp open  commplex-link
8080/tcp open  http-proxy

 I found this in /home/xnat/tomcat7_xnat/webapps/xnat/WEB-INF/web.xml

  <!-- INSERTED FOR Apache Axis -->

…

    <servlet-name>SOAPMonitorService</servlet-name>

    <display-name>SOAPMonitorService</display-name>

    <servlet-class>org.apache.axis.monitor.SOAPMonitorService</servlet-class>

    <init-param>

      <param-name>SOAPMonitorPort</param-name>

      <param-value>5001</param-value>

…

My question: Is this for the communication between Apache and Tomcat? Is this a security issue? Should I close it for anything but localhost traffic?

Thanks a lot,

Sven

[Herrick, Rick]

This is really a relic of the Web services we used to use for back-end communication with the XNAT server. There’s a SOAPMonitorApplet as well that could theoretically be used to monitor SOAP transactions between XNAT and some client. In practice, this is mostly deprecated nowadays. There are a few pipeline utilities that still use some of the Web services, but I think you’re probably fine to remove this entirely.

 

Rick Herrick

Sr. Programmer/Analyst

Neuroinformatics Research Group

Washington University School of Medicine

(314) 827-4250

--
You received this message because you are subscribed to the Google Groups "xnat_discussion" group.
To unsubscribe from this group and stop receiving emails from it, send an email to xnat_discussi...@googlegroups.com.
To post to this group, send email to xnat_di...@googlegroups.com.
Visit this group at http://groups.google.com/group/xnat_discussion.
For more options, visit https://groups.google.com/d/optout.

---

The material in this message is private and may contain Protected Healthcare Information (PHI). If you are not the intended recipient, be advised that any unauthorized use, disclosure, copying or the taking of any action in reliance on the contents of this information is strictly prohibited. If you have received this email in error, please immediately notify the sender via telephone or return mail.