Re: Re: Strange ports


Per the original note - this was a scan of an external firewall.

There is no reason for udp/53 to be open unless this is a stateless
firewall (doubtful per the scan). Internal clients would be coming
through the internal interface of the firewall and udp/53 would need to be
opened on that interface not the external interface.

But to be quite frank - I am shocked how many people are weighing in on
what "needs to be opened" without knowing one single requirement. He
asked an opinion on a couple of ports. What is opened or not depends upon
that companies architecture and how they have things deployed. He needs
to work with those folks to determine what is valid or not.

t.s


I would agree that port 53 UDP needs to be open. Port 53 TCP does not
unless you are doing large DNS zone transfers.

------------------------------------------------------------------------
This List Sponsored by: Cenzic

Are you using SPI, Watchfire or WhiteHat?
Consider getting clear vision with Cenzic
See HOW Now with our 20/20 program!

http://www.cenzic.com/c/2020
------------------------------------------------------------------------




------------------------------------------------------------------------
This List Sponsored by: Cenzic

Are you using SPI, Watchfire or WhiteHat?
Consider getting clear vision with Cenzic
See HOW Now with our 20/20 program!

http://www.cenzic.com/c/2020
------------------------------------------------------------------------

Relevant Pages

  • Re: ftp problem
    ... > here is my whole firewall script ... > # No restrictions on Loopback Interface ... > # or from this gateway server destine for the public Internet. ... > # Allow out secure FTP, Telnet, and SCP ...
    (freebsd-questions)
  • Re: Checkpoint experiences
    ... decide they want the firewall used by the big boys...often repeated, ... The Nokia appliance IPSO, is useful if you don't want to take the ... It is no wonder that the Nokia interface is called ... > billions on training, and classes, consultants, support contracts, etc. ...
    (comp.security.firewalls)
  • Re: Lets talk about firewalls - what do we as a group think a firewall should be/have?
    ... part of the same network as the LAN. ... Each interface of a firewall should be distinct from ... interfaces, so a "DMZ interface" is not a requirement. ...
    (comp.security.firewalls)
  • Proxy ARP and Routing
    ... some CPE from our ISP connected to a firewall. ... the public IPs on the physical DMZ network. ... packets to the host on the DMZ? ... on the DMZ interface. ...
    (SunManagers)
  • RE: [fw-wiz] Dynamic routing on a firewall
    ... is on this interface", rather than having to work it out manually each time. ... Obviously, if the firewall is using dynamic routing, there would be no ... >> party is in their own DMZ. ...
    (Firewall-Wizards)