I like to look at it the other way around. "What ports not to block?". I block ALL ports except for the ones that *I* want to get through. This increases the security of your firewall, because you have only allowed the ports that YOU want open.
...adam On Thu, Apr 05, 2001 at 12:57:24PM -0700, Brandon High wrote: > Does anyone have a recommendation of ports that should be blocked (via > ipchains/netfilter/etc) to make a system more secure? > > In light of the recent security holes, I did a netstat -an, then lsof -i for > all ports that were listening and/or UDP. I put a filter in the way of > everything that I didn't want externally visible, but UDP port 1028 shows > nothing listening lsof. I blocked it out of principle, but does anyone know > what it might be? > > -B > > -- > Brandon High [EMAIL PROTECTED] > We are Homer of Borg. Resistance is ... Ooo! Donuts! > > > > -- > To UNSUBSCRIBE, email to [EMAIL PROTECTED] > with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED] > ------------------------------------------------- Adam Spickler Whaddu LLC. http://www.whaddu.com WebHosting and Design/Development Unlimited -------------------------------------------------
