Re: 80 and 88
From: Steven L Umbach (n9rou_at_nscomcast.net)
Date: 06/29/04
- Next message: Keith: "network traffic encryption???"
- Previous message: Steven L Umbach: "Re: Disconnecting Session - Idle Time"
- In reply to: Svejk: "Re: 80 and 88"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Date: Tue, 29 Jun 2004 01:37:51 GMT
Kerberos is required for AD replication between AD domain controllers. It is
not required to access a share or logon to the domain. NT computers can be
members of a W2K domain and do not use kerberos, but use ntlm instead. I am
not sure exactly what the question is trying ot get at as it is vague. W2K
domain controllers can be attacked through port 80 if they are running IIS,
which they are in a default installation. Of course a firewall would
mitigate a lot of that risk, though it should be disabled [IIS] if not used
and if it is used the IIS service should be hardened by being up to date on
all patches and using the IIS Lockdown tool. --- Steve
"Svejk" <svejkmb-mail@yahoo.co.uk> wrote in message
news:42c83856.0406280245.2f5d94@posting.google.com...
> "Steven L Umbach" <n9rou@nospam-comcast.net> wrote in message
news:<Vravc.38862$Ly.20537@attbi_s01>...
> > Port 88 is for kerberos while 80 TCP is for http website.
>
> If a Windows 2000 Server is a domain controller, then it is running
> Active Directory, right?
>
> If it is running Active Directory, then is kerberos *required*?
>
> Does the question below make sense then?
>
> Thanks,
> Svejk
>
>
> > "Svejk" <svejkmb-mail@yahoo.co.uk> wrote in message
> > news:42c83856.0406010943.6b4fc526@posting.google.com...
> snip
> > >
> > > "Discuss how an intruder using ONLY the TCP/80 and TCP/88 ports can
> > > break into a Windows 2000 Server that is functioning as a domain
> > > controller. Assume that the Windows 2000 Server is not making use
> > > of IP-Sec or Kerberos."
- Next message: Keith: "network traffic encryption???"
- Previous message: Steven L Umbach: "Re: Disconnecting Session - Idle Time"
- In reply to: Svejk: "Re: 80 and 88"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Relevant Pages
|
|
