Full Disclosure mailing list archives

Re: closing ports


From: marko <chrome () liquidinfo net>
Date: Fri, 7 Nov 2003 16:37:48 +0200

Hi,

On Fri, 07 Nov 2003 02:58:04 -0500
"Christ-Henning Ljosheim" <chris () megasat no> wrote:

I've closed port 1214 and 6881 to 6889 . Anyone else I should close ?

I recommend you take the default approach of denying everything instead
of closing certain ports. After this has been done, allow the necessary
inbound traffic to your host(s) that you need. 

Home-users rarely need any inbound traffic, unless they're using some
P2P programs or similar stuff. Public servers on the other hand require
some ports open (how else could they serve?). For example a web-server
requires port 80 to serve any pages to clients, assuming the server is
setup to listen on that port.

-m-
-- 
- Liquid Information - http://www.liquidinfo.net
- E-mail: Remove NOS_PAM if present in address (Usenet)
- PGP: http://www.liquidinfo.net/about.html
--

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html


Current thread: