Re: Ports and Protocols

From: fluidly unsure (daveREMOVE_at_THErdksoftwareOBVIOUS.com)
Date: 11/23/04


Date: Mon, 22 Nov 2004 23:40:11 GMT

Thank you all!

I haven't read all the RFCs yet, but I've been planning to try to pierce
my firewall by sending packets to the wrong protocol.

An example of my current understanding:

80 uses both so it won't be vulnerable
53 ignores TCP so it won't be vulnerable
510 is usually inside the network so it won't be vulnerable from the
Internet.

Off the top of my head, I can't think of anything that uses the right
combination.

Maybe I need to do a little more thinking.
Maybe I'm working on a problem that has already been considered and is
not vulnerable.
Maybe I'm just a ... (enter whatever you think is appropriate).

-- 
Dave


Relevant Pages

  • [fw-wiz] UNSUBSCRIBE
    ... (Paul D. Robertson) ... > fixup protocol icmp error ... >> isn't about the security properties of the control, ... errors in the firewall, configuration errors, and it then takes physical ...
    (Firewall-Wizards)
  • Re: [fw-wiz] Secure Computing Sidewinder?
    ... We are moving off Sidewinder G2 solely because of the price. ... There are many different approaches to designing a firewall, ... thorough than most other "application proxy" firewalls, ... packet, tear it apart, inspects it, and then depending on the protocol it ...
    (Firewall-Wizards)
  • Re: Natted IP
    ... > useful if one trys to tunnel an exploit of one protocol inside a second ... but the router "firewall" will block all unsolicited packets unles they are ... If you send some kind of tunneled packet wrapped inside, ... > run only with JS enabled with Java applets disabled. ...
    (alt.computer.security)
  • Re: Ports getting hammered?
    ... >>> If your Watchguard can't stop outbound traffic... ... >>> Would not the Windows XP firewall do exactly the same work? ... >> protocol analysis to see if protocols are being broken only a IDS ... > permitted ports and protocols. ...
    (comp.security.firewalls)
  • Firewall that blocks NetBEUI etc.
    ... Personal firewall functionality is mostly oriented toward TCP/IP protocol. ... I have NT4WKS and we have advanced Microsoft network - they have some tool ... I have tried to audit them with netstat or TCPview to see all network ...
    (comp.security.firewalls)

Quantcast