iB::Topic::open ports

	Damn Small Linux :: Damn Small Linux Board The DSL Forums

» Welcome Guest
[ Log In :: Register ]

Damn Small Linux Board » Damn Small Linux » Networking » open ports

		Mini-ITX Boards Sale, Fanless BareBones Mini-ITX, Bootable 1G DSL USBs, 533MHz Fanless PC <-- SALE $200 each!
		Get The Official Damn Small Linux Book. DSL Market , Great VPS hosting provided by Tektonic

Pages: (5) </ [1] 2 3 4 5 >/

[ Track this topic :: Email this topic :: Print this topic ]

Topic: open ports, portscan showed several ports open Web

< Next Oldest | Next Newest >

gray

Group: Members
Posts: 10
Joined: Dec. 2005

Posted: Dec. 25 2005,09:14

Hello

While I was using DSL 2.0, I asked a buddy to do a portscan on my connection (dial-up modem) and was informed that 4 ports were open - in fact he was able to login and send an e-mail to me from my system ! Could the ports not be set to closed - ideally to drop - for all internet connections not started by a program from the system ? That apart I was very happy with the system - just not willing to be that unsafe.

Cheers - Gray

roberts

Group: Members
Posts: 4983
Joined: Oct. 2003

Posted: Dec. 25 2005,16:42

Hmmm, first post. Unsubstantiated claim.
Could this be a drive by FUD attack
or a real concerned new user?

netstat -tul
The above command will display all open listening tcp and udp ports.
.
On dialup, after booting up DSL with nodhcp and making the connection there are NO default open ports.

You would have to start a server process for there to be such with a Foreign Address of *.*
And you would have to set a password for your buddy to login.

On broadband using dhcp, or if you didn't boot with nodhcp, then you will see port 68.
For the paraniod after establishing your IP you may then sudo pkill pump to close this port used to obtain your IP.

Damn Small Linux is pretty damn safe out of the box.

gray

Group: Members
Posts: 10
Joined: Dec. 2005

Posted: Dec. 25 2005,17:28

Hello

Actually I rather like DSL !! My comments here are supplied in the hopes that it might improve a damn fine system even further.

I never used any OS that reacts so fast to input and being able to install a system to hard drive in a matter of seconds is stunning - especially as my other favourite is Gentoo, which requires compilation and hence can take a day or more, if KDE is added to the mix....

I do admit to one error for which I humbly apologise: the number of ports was two - NOT four and the open port numbers were 68,554 and 1755.

Gray

roberts

Group: Members
Posts: 4983
Joined: Oct. 2003

Posted: Dec. 25 2005,17:46

I have already covered port 68.
Port 68 is needed for obtaining IP via dhcp.
On dialup you should boot
dsl nodhcp

or you may manually close it with sudo pkill pump

Port 554 is not part of DSL.
It is for real player. Real Player is not part of DSL.

Port 1755 is Windows Media ASF which it not part of DSL.