Re: Port question

On 2009-06-24 Ken Pryor wrote:
Hello all, I just joined the list and this is my first post to it. I
am a networking noob and am not sure if this is something I should
worry about or not. I just set up a Smoothwall Express firewall and
later ran a Shields Up scan at grc.com It showed all ports as stealth
except one, port 113, which it showed as closed. Shields Up gave my
system a "failed" score based on that one port showing as closed. My
question is, is this anything I need to worry about and, if so, how
might I fix it?

There is no such thing as "stealth" in IP networks. That's braindead
marketing babble from people who failed to understand how TCP/IP works.
Not responding to SYN or ICMP packets does not magically make your host
invisible.

A port being reported as "closed" is perfectly fine, because the result
means that there's no service listening on that port. If anything, you
should be worried about ports that show up as "stealth".

And don't bother with "Shields Up". If you want to do a portscan, use
something like nmap.

Regards
Ansgar Wiechers
--
"The Mac OS X kernel should never panic because, when it does, it
seriously inconveniences the user."
--http://developer.apple.com/technotes/tn2004/tn2118.html

------------------------------------------------------------------------
Securing Apache Web Server with thawte Digital Certificate
In this guide we examine the importance of Apache-SSL and who needs an SSL certificate. We look at how SSL works, how it benefits your company and how your customers can tell if a site is secure. You will find out how to test, purchase, install and use a thawte Digital Certificate on your Apache web server. Throughout, best practices for set-up are highlighted to help you ensure efficient ongoing management of your encryption keys and digital certificates.

http://www.dinclinx.com/Redirect.aspx?36;4175;25;1371;0;5;946;e13b6be442f727d1
------------------------------------------------------------------------

Relevant Pages

  • Port question
    ... am a networking noob and am not sure if this is something I should ... later ran a Shields Up scan at grc. ... gave my system a "failed" score based on that one port showing as ... My question is, is this anything I need to worry about and, ...
    (Security-Basics)
  • Re: ISP: "No Problem... we probe all the time"
    ... >> worry as they do not represent any type of access threat. ... AFAIK port scans are, and never have been illegal (certainly in the UK ... ISP checking the health of our router periodically so they can tell us ... Any probe can easily be verified by checking the source IP address to ...
    (comp.security.firewalls)
  • Re: ISP: "No Problem... we probe all the time"
    ... >> worry as they do not represent any type of access threat. ... AFAIK port scans are, and never have been illegal (certainly in the UK ... ISP checking the health of our router periodically so they can tell us ... Any probe can easily be verified by checking the source IP address to ...
    (comp.security.firewalls)
  • Re: RFC: outb 0x80 in inb_p, outb_p harmful on some modern AMD64 with MCP51 laptops
    ... Well, if the delay is so much unspecified, what about _reading_ port 0x80? ... Please no HTML, I'm not a browser - Pas d'HTML, je ne suis pas un navigateur ... Here's what I worry about. ...
    (Linux-Kernel)
  • Re: Hijacked Ruski tanks
    ... several captured ships tied up at one port. ... Just send a stick of B-52's over it and carpet bomb it.Don't worry about ... William Black ...
    (sci.military.naval)
Quantcast