nmap

Запускаю nmap extsrv на extsrv:
Starting nmap 3.81 ( http://www.insecure.org/nmap/ ) at 2005-12-21 11:41 MSK
Interesting ports on localhost.localdomain (127.0.0.1):
(The 1661 ports scanned but not shown below are in state: closed)
PORT   STATE SERVICE
21/tcp open  ftp
22/tcp open  ssh

Запускаю с другого компьютера:
Starting nmap 3.81 ( http://www.insecure.org/nmap/ ) at 2005-12-21 11:39 MSK
Interesting ports on extsrv (....):
(The 1658 ports scanned but not shown below are in state: closed)
PORT     STATE SERVICE
21/tcp   open  ftp
22/tcp   open  ssh
389/tcp  open  ldap
1002/tcp open  windows-icfw
1720/tcp open  H.323/Q.931

netstat -l
Active Internet connections (only servers)
Proto Recv-Q Send-Q Local Address               Foreign Address             State
tcp        0      0 *:ftp                       *:*                         LISTEN
tcp        0      0 *:ssh                       *:*                         LISTEN

Откуда берутся открытые порты 389, 1002, 1720?
И как их закрыть?