Re: Outpost Newbie Question Re:Outbound UDP

From: chrisclu (chris.20.chrisclu@spamgourmet.com)
Date: 07/19/02 

From: "chrisclu" <chris.20.chrisclu@spamgourmet.com>
Date: Fri, 19 Jul 2002 05:29:41 GMT

"mail" <info.box@home.nl> wrote in message
news:ZK9Z8.163414$38.19623249@zwoll1.home.nl...
> reference:http://www.elfqrin.com/docs/hakref/portlist.html
> portlist with known ports
>
> Some port are necessary for making contact or even getting on the internet
> at all, like DNS or DHCP requests.
>
> domain 53/tcp Domain Name Server
> domain 53/udp Domain Name Server
> >> will be used for DNS resolving and if you look at the external host in
> your logs it most likely should be one of the DNS servers of your ISP. You
> can force the firewall to listen/connect to those servers only.
> DNS resolving is getting a IP number for an in text-format request like
> www.cnn.com which is 64.236.16.84 in return. (DNS lookup) (use ping -a
> www.cnn.com)
>
> bootps 67/tcp Bootstrap Protocol Server
> bootps 67/udp Bootstrap Protocol Server
> bootpc 68/tcp Bootstrap Protocol Client
> bootpc 68/udp Bootstrap Protocol Client
> >> is the DHCP, which will provide you with an IP address and DNS
> information who are your DNS-servers. time-syncronizing (if supported or
> available),
> daytime 13/tcp Daytime (RFC 867), daytime 13/udp
> Daytime (RFC 867)
> who is your Gateway server of that ISP.
>
> excludable Ports:
> epmap 135/tcp DCE endpoint resolution
> epmap 135/udp DCE endpoint resolution
> netbios-ns 137/tcp NETBIOS Name Service
> netbios-ns 137/udp NETBIOS Name Service
> netbios-dgm 138/tcp NETBIOS Datagram Service
> netbios-dgm 138/udp NETBIOS Datagram Service
> netbios-ssn 139/tcp NETBIOS Session Service
> netbios-ssn 139/udp NETBIOS Session Service
> microsoft-ds 445/tcp Microsoft-DS
> microsoft-ds 445/udp Microsoft-DS
> 37337, 12345 trojans (but look at the ref. for more)
> 1900 Microsoft uPnP
> search at microsoft for a patch, since you are using Win98
>
> Sincerely,
>
> H
>
> "dsm" <sunbaby82@hotmailnospam.com> wrote in message
> news:So7Z8.105804$UT.6834255@bgtnsc05-news.ops.worldnet.att.net...
> > I'm looking at my logs and it shows a lot of outbound UDP traffic for
> several
> > apps on remote port 53 (reason...ALLOW DNS RESOLVING). Is this ok? I
am
> new
> > and not really sure what other details to supply. Please be patient and
> thank
> > you for the helping me with this matter. It is greatly appreciated!
> >
> > BTW...I am using a dial up on a WIN98.
> >
> > Thank you,
> > David.
> >
Hi David,
If you ask over at www.agnitum.com/forum You will get the help you want.
We, many times, even post screenshots of our own rules which makes things
real simple for you.
Chris 

---
Outgoing mail is certified Virus Free.
Checked by AVG anti-virus system (http://www.grisoft.com).
Version: 6.0.377 / Virus Database: 211 - Release Date: 7/15/02

Relevant Pages

  • Re: Name resolution order in Windows 7
    ... I disabled netBIOS and IPV6, flushed DNS ... disabled in Windows without disabling ... ... Description of the Microsoft Computer Browser Service ...
    (microsoft.public.windows.server.dns)
  • Re: UNC access failure: Logon Failure: The target account name is
    ... > So how do force DNS to accept dynamic updates from this machine? ... If it is one of your own DNS servers, ... is the zone AD Integrated or are you using ... NetBios is resolution is misconfigured or not propery supported. ...
    (microsoft.public.win2000.dns)
  • Re: Outpost Newbie Question Re:Outbound UDP
    ... portlist with known ports ... like DNS or DHCP requests. ... netbios-ns 137/tcp NETBIOS Name Service ... microsoft-ds 445/tcp Microsoft-DS ...
    (comp.security.firewalls)
  • Re: What is FQDN ?
    ... Active Directory setup Wizard didn't add my computer name which is "DC1DNSAD". ... Connection-specific DNS Suffix. ... I think at one Point AD Setup Wizard ask you Question What should be NETBIOS ... How to Configure OEx for Internet News ...
    (microsoft.public.windows.server.dns)
  • Re: Name resolution order in Windows 7
    ... I disabled netBIOS and IPV6, flushed DNS ... disabled in Windows without disabling ... ... Description of the Microsoft Computer Browser Service ...
    (microsoft.public.windows.server.dns)
Quantcast