Penetration Testing mailing list archives

Re: Any abuses on opening outbound port 43 tcp and udp


From: Raja <raja1.it.consultant () gmail com>
Date: Fri, 13 Aug 2010 18:09:02 +0530

I have a host in DMZ. I'm using some script to use whois service to fetch domain registration information. Whois service requires port 43 to be allowed from my DMZ to outside to reach whois servers.
It creates a hole in the firewall to outside.
So, my question would here be like, any abuses of opening port 43 from inside to outside?

+Raja

On 8/12/2010 8:57 PM, Adrian J Milanoski wrote:
I am not certain but I would recommend using a higher range in the
ports. As the bottom 1000 ports are almost all taken for some sort of
service somewhere.

I hope that helps

On Thu, Aug 12, 2010 at 3:29 AM, Raja<raja1.it.consultant () gmail com>  wrote:
Hi,

Does anybody know if there are any abuses on opening outbound port 43
tcp/udp?

More info: this port will be used as destination port by whois service to
fetch domain registrar info.

Thanks.

------------------------------------------------------------------------
Securing Apache Web Server with thawte Digital Certificate
In this guide we examine the importance of Apache-SSL and who needs an SSL
certificate.  We look at how SSL works, how it benefits your company and how
your customers can tell if a site is secure. You will find out how to test,
purchase, install and use a thawte Digital Certificate on your Apache web
server. Throughout, best practices for set-up are highlighted to help you
ensure efficient ongoing management of your encryption keys and digital
certificates.

http://www.dinclinx.com/Redirect.aspx?36;4175;25;1371;0;5;946;e13b6be442f727d1
------------------------------------------------------------------------






------------------------------------------------------------------------
This list is sponsored by: Information Assurance Certification Review Board

Prove to peers and potential employers without a doubt that you can actually do a proper penetration test. IACRB CPT and CEPT certs require a full practical examination in order to become certified.
http://www.iacertification.org
------------------------------------------------------------------------


Current thread: