Re: Port question

[Ansgar Wiechers <bugtraq () planetcobalt net>]

On 2009-06-25 Marco Shaw wrote:
> > And don't bother with "Shields Up". If you want to do a portscan, use
> > something like nmap.
>
> Since this is a basics list...
>
> Now, let's qualify that a bit...  Not everyone is technically savvy
> enough to know what to do with such a statement.  Nmap requires you
> have a system to run it with/on.  That also requires (or should to be
> somewhat valid/useful) that you have this run externally.  So you need
> to have a friend outside of your own "personal network" to scan you
> and provide you with the results.

Having some computer of your own outside the local network will do as
well. Another option might be to connect a portable computer into the
external interface of the router/firewall and do the scan from there.
That would give the most reliable results, too.

> Loading something on a PC in your own little network is good for
> learnings, and you can definitely port scan systems in your own
> internal network, but I think the goal should be to port scan outside
> of your private network beyond your ISP access point so you know what
> *everyone else* can see...

Yes.

google://online+port+scanner

> In the absence of this, using *something* is better than *nothing*...

IBTD. Nothing is most certainly better than something misleading.

Regards
Ansgar Wiechers
-- 
"The Mac OS X kernel should never panic because, when it does, it
seriously inconveniences the user."
--http://developer.apple.com/technotes/tn2004/tn2118.html

------------------------------------------------------------------------
Securing Apache Web Server with thawte Digital Certificate
In this guide we examine the importance of Apache-SSL and who needs an SSL certificate.  We look at how SSL works, how 
it benefits your company and how your customers can tell if a site is secure. You will find out how to test, purchase, 
install and use a thawte Digital Certificate on your Apache web server. Throughout, best practices for set-up are 
highlighted to help you ensure efficient ongoing management of your encryption keys and digital certificates.

http://www.dinclinx.com/Redirect.aspx?36;4175;25;1371;0;5;946;e13b6be442f727d1
------------------------------------------------------------------------