Home > Is My > Is My Redhat 9 Safe With All This Ports Open?

Is My Redhat 9 Safe With All This Ports Open?

Actually, rsh> is the application for "Remote Shell". The server is using a "privileged" port (i.e. In other words, no such servers were running locally. May 15, 2005 SOLTEK 915GPro-FGR Mobo....all USB ports stopped working today.

If a connection comes for this port, inetd intercepts it, and then will spawn the appropriate daemon, i.e. The configuration of how inetd handles this is typically done in /etc/inetd.conf. To use: exec 6<>/dev/tcp/ip.addr.of.server/445 echo -e "GET / HTTP/1.0\n" >&6 cat <&6 I'm using 6 as the file descriptor because 0,1,2 are stdin, stdout, and stderr. 5 is sometimes used by We'll just use a relative few options here.

As an example, let's check all currently listening servers and active connections for both TCP and UDP on our hypothetical host, bigcat.

The proxy then will open an external connection of its own, which probably is what is going on with lines four and five.

Since we gave netstat both the If your firewall is effectively bouncing this kind of thing, it is no threat to you at all. Or if the firewall is blocking the port for outside visitors. If after the system has been in service you find unexpected open ports in listening state, that might be signs of intrusion and it should be investigated.

If there is a lot of data, it will be broken up into multiple packets which is almost always how it works. The example above did not have a telnet or ftp server in the LISTENER section in the netstat example above. But certainly, scanning individual ports across numerous systems is a very, very common occurrence.

8.4.2. May 12, 2004 #3 novkhan TS Rookie Topic Starter Posts: 35 Originally posted by Nodsu Unless you have forwarded the ports 80 and 255 on the router knowingly then those open

Low risk, but for most should be LAN only.

3306 - MySQL server port. Linux | FreeBSD | OpenBSD | NetBSD | BSDI | AIX | Solaris/SunOS | Tru64 | HP-UX | IRIX | Minux | SCO Unix | Mac OS X UNIX Resources » But not in this case. a fantastic read The packets will be transmitted one at a time, and then "re-assembled" at the other end.

will return 0 if and only if netcat could successfully connect to the port. Port 601 is the Web interface to Samba. more hot questions question feed about us tour help blog chat data legal privacy policy work here advertising info mobile contact us feedback Technology Life / Arts Culture / Recreation Science The following is an example of the command to be issued from the console of another system to determine which ports are listening for TCP connections from the network: ~]# nmap

more stack exchange communities company blog Stack Exchange Inbox Reputation and Badges sign up log in tour help Tour Start here for a quick overview of the site Help Center Detailed https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/6/html/Security_Guide/sect-Security_Guide-Server_Security-Verifying_Which_Ports_Are_Listening.html Low risk.

98 - Linuxconf web access administrative port. Another mail retrieval protocol. Note that while I am connected to their FTP server on their port 21, the port on my end that is used by my FTP client is 1359.

And may be used for some general mischief making as well.

8.4.6. The next two entries are connections to a remote web server as indicated by the port 80 after the colon in the fifth column. The port is the number just to the right of the colon. Name servers listen on this port, and answer queries for resolving host names to IP addresses.

For LAN use only. It infects a system, then attempts to spread itself typically via the same vulnerability. I can connect when I turn iptables off. Making sure that well known ports and services are not available (either by not enabling them, changing the port they run on, or preventing access to them with a firewall) or

Low risk, but probably not required for most users. There are many reasons someone may want to break in to someone else's computer. Goodday.

yes, it is true that computers won't be completely secure.

The administrator of the FTP server will need to take appropriate precautions that his server is secure. Otherwise, this also matched IP addresses containing .80 and ports starting with 80 such as 8000. –Patrick Oscity Jul 2 '14 at 22:41 | show 7 more comments up vote 61 TechSpot is a registered trademark. Once they hit the destination, there is no good way to completely ignore them.

"DDoS", Distributed Denial of Service, is where multiple sources are used to maximize the

We also don't really know if all the listening services are really required by the owner here. It is also possible to firewall this off, so that it is for use only to our LAN clients as part of an Intranet. The phone numbers have to be unique for the system to work. PrevNext current community chat Stack Overflow Meta Stack Overflow your communities Sign up or log in to customize your list.

It has a fast fail path IIRC. Both are spawning sub-processes.