RE: [cobalt-users] Newbie needs Port Sentry help

["Nick Ciantro" <nc@xxxxxxxxxxxxxxxxxxx>]

Hey all,

just ran a netstat and looks like there were some fishy ports listening.
Can someone please let me know if any of these are irregular and possible
hacks.

tcp ports:
443
5102
5101
3001
5100
3000
444

udp ports:
1048

I looks forward to your replies .. thanks.

Nick

-----Original Message-----
From: cobalt-users-admin@xxxxxxxxxxxxxxx
[mailto:cobalt-users-admin@xxxxxxxxxxxxxxx]On Behalf Of John M Troher
Sent: Wednesday, February 28, 2001 11:45 AM
To: 'cobalt-users@xxxxxxxxxxxxxxx'
Subject: RE: [cobalt-users] Newbie needs Port Sentry help


do not block/monitor the following ports:
21 FTP
22 SSH (if you are using SSH)
23 Telnet
25 Sendmail
53 DNS (unless you are not using DNS then I suggest blocking this port)
79 finger (optional, I block it)
80 HTTP
81 Admin HTTP (Web admin)
110 POP3
143 IMAP

I dont think I missed anything : )

John
-----Original Message-----
From: Dan [mailto:daniel@xxxxxxxxxxxxxxxxxxxxxxxx]
Sent: Wednesday, February 28, 2001 11:01 AM
To: admin@xxxxxxxxxxxxxxxxx
Subject: [cobalt-users] Newbie needs Port Sentry help


Hi,

I'm going to install Port sentry soon but on reading the instructions it
seems you have to be clued up on what the various ports are - I don't.

I asked my hosts as to what ports to scan/not scan, but all they could do
was point me to the /etc/services file, of which they didn't understand what
some of the port entries were for, which doesn't fill me with great
confidence!

As a newbie what should I look out for - I don't want to inadvertently block
access to a port that's used that I'm not aware of, if you catch my meaning!
Is there a list of ports available and what they do? Or has someone set this
up on a Raq 3 and be able to tell me what to do?

Any advice would be appreciated.

Dan

_______________________________________________
cobalt-users mailing list
cobalt-users@xxxxxxxxxxxxxxx
To Subscribe or Unsubscribe, please go to:
http://list.cobalt.com/mailman/listinfo/cobalt-users

_______________________________________________
cobalt-users mailing list
cobalt-users@xxxxxxxxxxxxxxx
To Subscribe or Unsubscribe, please go to:
http://list.cobalt.com/mailman/listinfo/cobalt-users