Re: Do I need these services listening?

rodlinkowitz_at_whale-mail.com
Date: 03/14/05 

Date: 14 Mar 2005 01:04:14 -0800

Gerald Vogt wrote:

> I think I don't understand your setup correctly. You have a DSL modem

> that connects to the DSL splitter and the NAT router. Connected to
the
> NAT router are the computers. All computers in your LAN (which should
be
> really all of your computers) have private IP addresses (e.g.
> 192.168.1.1 or similiar anything with 192.168 in the beginning most
> likely.). Your NAT router then will have an assigned IP address by
your
> ISP and if you do an online scan from any computer inside the network

> all that gets scanned is the NAT router which should not have any
open
> ports. That's what I think it is supposed to be.
>
> You write about a second computer that is not physically connected to

> the modem & router. This is wierd. Any computer inside your LAN must
be
> connected to the router (wired or wireless connection). How do you
> connect the second computer to the router or whereever you connect
it?
> If the second computer is not connected to the router how does it
have
> internet connections? Which NAT router do you use?
>
> Anyway, if a online scanner in the internet does detect an open port
> there is something wrong with your setup I you may be vulnerable.
What I
> find most confusing is the reports on open ports like 25 and 110. 25
is
> SMTP and 110 is POP. Do you run an e-mail and POP server on your
system?
>
> Gerald

No. I simply have an email program, like most people. I have
a very simple LAN setup, really. DSL Modem, Netgear rp614 router, and a
second computer connected via Ethernet cable to the first computer
(which hosts the modem and router). I was saying the second computer
was not physically connected to the DSL modem, but of course, it is
connected to the router via the cable. It isn't that the online
scanners find open ports. I'm secure according to the online scanners.
Its the software scanners that have found the prevoiusly mentioned
ports open.

I ran more software scanning programs today, using my ISP's dynamic IP
address instead of the private IP address on the secondary computer in
my LAN (the one that does not
have the modem). The results were similar, all saying ports 25 and 110
were open, and most saying 135, 139 and 445 were open. Port monitors
show these ports as listening, but the big question in my mind is, is
the internet able to 'hear' them, or is it only the local network?
Again,
online scanners show all ports stealthed, so I don't know which is more
accurate.

Relevant Pages

  • Re: Do I need these services listening?
    ... > receives its internet connection via the first computer. ... wrote both computers are connected to the router and the router is ... The router does provide the internet connection. ... all the ports are supposed to be closed ...
    (comp.security.firewalls)
  • Re: Net Meeting and Ports
    ... >> for that sort of thing. ... which other Ports & Protocols to use. ... With TCP, when your PC Connects (makes an Outbound, TCP Connection) ... >>> I opened up a range of ports on the router and tried calling Aries ...
    (uk.people.silversurfers)
  • Re: Simultaneous DSL and cable modem access on a SBS network...sorf ot.
    ... Internet Connection wizard on the SBS box, ... "More Information" button on what ports need to be opened to the SBS. ... The server and the fax (the line the DSL modem ... The cable modem already has a router attached to it as well, ...
    (microsoft.public.windows.server.sbs)
  • Setting up Home Network w/ 2 Routers
    ... The connection is obviously PPPoE. ... These 5 jacks have the cables in the basement by the 1701HG. ... The next piece on the network is a Netgear RangeMax Wireless Router ... ports on the 1701HG). ...
    (microsoft.public.windowsxp.network_web)
  • Re: VPN Problem
    ... I'd leave it enabled....you can initiate a VPN connection ... >> behind a router with no inbound ports open at all. ... >> If so, but you can't ping by name, you'll need an LMHOSTS file to do ...
    (microsoft.public.windowsxp.work_remotely)