Re: Telnet, Ping and Port 1025

From: C & C Antiques and Collectables (noreply_at_thisfalse.com)
Date: 09/05/04


Date: Sun, 5 Sep 2004 18:26:09 +0100

In article <V4mdnUyPCuXQE6fcRVn-qA@scnresearch.com>,
Don Taylor wrote ...
 
> >> >> > I just run a security check on my system at Symantec. It reported
> >> >> > risks from Telnet, Ping and open port number 1025. Can anyone help me
> >> >> > close these these holes in my systems security please?
> >> >>
> >> >I do have Norton AV and Firewall installed, both are updated daily. It
> >> >was Norton's own on-line security check that revealed the Telnet, Ping
> >> >and 1025 holes in XP Home.
> >>
> >> Norton doesn't seem, by default, to lock down all ports.
> >> But if you don't see a need for a particular service then
> >> you can add a rule yourself that will block incoming and/or
> >> outgoing packets for any particular port.
> ...
> >Well, thank you Don... a comprehensive answer if ever I read one!
> >I have closed both 1025 and 1029 ports and set Norton to let me know
> >when my new rule is fired. I am however uncertain precisely how to set
> >up my system to shut down the Telnet and Ping problems. I do not
> >knowingly use either of these.
>
> First, thanks. Second, I made a mistake, I just googled to check
> (and that is a quick way you can figure out what some warning from
> your firewall is, just google for +port +nnnn where nnnn is the port
> number reported by Symantec. That will usually get you a web page
> to tell you some name that this port uses) But, back on track,
> ping doesn't do its work with a port, it is lower level than that.
> I just reached over to a box running Norton Firewall and tried to
> find something in the help there to see about blocking ping but
> couldn't get any help from it. Maybe the Symantec website, or
> some of the other help you were offered will get you this info.
>
> Telnet, sort of ancient old ascii dos-looking way of talking between
> a pair of computers. You could do this from yours out to another
> computer or some other computer could try to reach in from theirs
> to yours. If you've never done this then you can easily turn this
> off. I just googled for telnet port and the first web page told
> me it uses port 23. (there is the part about creating firewall
> rules to be for UDP or TCP or both, those are two sort of levels
> of complexity, if you don't need a port you can have the rule apply
> to both of them with no loss, ditto incoming and outgoing).
>
>
> Start adding rules a little slowly, add one, try all the usual things
> you do on the net, see they still work, maybe then add another.
> But then I try to be cautious and not make 300 changes and then
> try to figure out which one broke something.
>
> I hope it works out for you
>
Very many thanks for your help Don, I am much happier (though not
completely happy...yet) with the security of my system. I followed your
advise and have added and tested one rule at a time, sound advice!

I am not certain that I fully trust Symantec's security check anyway.
The fact that they have attempted to sow a seed of doubt in my mind by
informing me that ports are open (I know that I have blocked them using
their own product) and then encourage me to buy the latest version of
their software by including adverts on the security test results page,
is nagging at me.

-- 
Charlie 
use "reply to" header for email


Relevant Pages

  • Re: Telnet, Ping and Port 1025
    ... >> outgoing packets for any particular port. ... >> telnet server running and the port open to accept telnet ... > up my system to shut down the Telnet and Ping problems. ... great page from MS Technet which shows how you can use the Windows ...
    (microsoft.public.security.virus)
  • Re: Securing telnet
    ... Plz, spare me... ... were before moving telnet. ... I'm saying you get a little more security because you are just ... that little harder to find running on a non-standard port, ...
    (comp.os.linux.security)
  • Re: Telnet, Ping and Port 1025
    ... >was Norton's own on-line security check that revealed the Telnet, Ping ... Norton doesn't seem, by default, to lock down all ports. ... outgoing packets for any particular port. ...
    (microsoft.public.security.virus)
  • Re: Securing telnet
    ... Plz, spare me... ... were before moving telnet. ... I'm saying you get a little more security because you are just ... that little harder to find running on a non-standard port, ...
    (comp.os.linux.security)
  • Re: 4.4.7 smtp error
    ... Actually, I just telnetted to mail.bandersson-akeri.se, and it responds, so that guy is active, however I agree, bandersson-akeri.no-ip.org does not respond with telnet and is either down, not configured, or the IP is incorrect. ... I typically use cryping rather than ping because it lets me check an individual port - not a true ping in that sense, but it does try to open a connection on a port and reports back whether it could make a connection. ... I use the command line ping quite frequently and by writing my own I could extend it in ways I wanted - such as being able to test other protocols or ports from the command line. ...
    (microsoft.public.windows.server.sbs)