Re: port 113

also sprach Anne Carasik <[EMAIL PROTECTED]> [2002.12.02.1703 +0100]: > Port 113 is auth/identd. > > IMHO, it makes sense to not let these in through your > firewall. Yes. You should DROP the Windoze crap (135-139, 445) and REJECT the ident requests. or else you might have to wait ages to connect

Re: port 113

also sprach Anne Carasik <[EMAIL PROTECTED]> [2002.12.02.1703 +0100]: > Port 113 is auth/identd. > > IMHO, it makes sense to not let these in through your > firewall. Yes. You should DROP the Windoze crap (135-139, 445) and REJECT the ident requests. or else you might have to wait ages to connect

Re: port 113

Ports 135-139 (and I think 445) are Netbios ports. Port 113 is auth/identd. IMHO, it makes sense to not let these in through your firewall. -Anne jjj3 grabbed a keyboard and typed... > > Ok, but if the port is 137 is that a problem? > > jjj3 > > Andy Coates writes: > > > > Hi All, > > >

Re: port 113

Ports 135-139 (and I think 445) are Netbios ports. Port 113 is auth/identd. IMHO, it makes sense to not let these in through your firewall. -Anne jjj3 grabbed a keyboard and typed... > > Ok, but if the port is 137 is that a problem? > > jjj3 > > Andy Coates writes: > > > > Hi All, > > >

Re: port 113

* jjj3 <[EMAIL PROTECTED]>: > Logs in my firewall shows me incoming connections to port 113 of the > firewall!! What it means? You might want to have a look at RFC 1413. Port 113 belongs to the auth protocol. Somei Mail- and IRC-Servers connect to this port if you use their Service.

Re: port 113

On Mon, Dec 02, 2002 at 11:13:28AM -, Andy Coates wrote: > > Netbios related probes I think (windows machines). If you don't have > any win machines, ignore it. > > Easiest place for these sort of queries is google - plenty of people ask > the same type of questions. > Better yet:

RE: port 113

Netbios related probes I think (windows machines). If you don't have any win machines, ignore it. Easiest place for these sort of queries is google - plenty of people ask the same type of questions. Andy. > Ok, but if the port is 137 is that a problem? > > jjj3 > > Andy Coates writes: >

Re: port 113

Ok, but if the port is 137 is that a problem? jjj3 Andy Coates writes: > > Hi All, > > > > Logs in my firewall shows me incoming connections to port 113 of the > > firewall!! What it means? > > Some service you or your computer is connecting to is checking your > ident. Disable the ident

Re: port 113

On Mon, Dec 02, 2002 at 10:55:28AM +, jjj3 wrote: > > Hi All, > > Logs in my firewall shows me incoming connections to port 113 of the > firewall!! What it means? > start here!! http://groups.google.com/groups?q=port+113&meta=site%3Dgroups -- Easter-eggsSp

RE: port 113

> Hi All, > > Logs in my firewall shows me incoming connections to port 113 of the > firewall!! What it means? Some service you or your computer is connecting to is checking your ident. Disable the identd daemon or comment out the entry in inetd.conf if you do it that way. Usually happens when

Re: port 113

* jjj3 <[EMAIL PROTECTED]>: > Logs in my firewall shows me incoming connections to port 113 of the > firewall!! What it means? You might want to have a look at RFC 1413. Port 113 belongs to the auth protocol. Somei Mail- and IRC-Servers connect to this port if you use their Service. -- To UN

Re: port 113

On Mon, Dec 02, 2002 at 11:13:28AM -, Andy Coates wrote: > > Netbios related probes I think (windows machines). If you don't have > any win machines, ignore it. > > Easiest place for these sort of queries is google - plenty of people ask > the same type of questions. > Better yet:

RE: port 113

Netbios related probes I think (windows machines). If you don't have any win machines, ignore it. Easiest place for these sort of queries is google - plenty of people ask the same type of questions. Andy. > Ok, but if the port is 137 is that a problem? > > jjj3 > > Andy Coates writes: >

Re: port 113

Ok, but if the port is 137 is that a problem? jjj3 Andy Coates writes: > > Hi All, > > > > Logs in my firewall shows me incoming connections to port 113 of the > > firewall!! What it means? > > Some service you or your computer is connecting to is checking your > ident. Disable the ident

Re: port 113

On Mon, Dec 02, 2002 at 10:55:28AM +, jjj3 wrote: > > Hi All, > > Logs in my firewall shows me incoming connections to port 113 of the > firewall!! What it means? > start here!! http://groups.google.com/groups?q=port+113&meta=site%3Dgroups -- Easter-eggsSp

RE: port 113

> Hi All, > > Logs in my firewall shows me incoming connections to port 113 of the > firewall!! What it means? Some service you or your computer is connecting to is checking your ident. Disable the identd daemon or comment out the entry in inetd.conf if you do it that way. Usually happens when

Re: Port 113 (auth) accept or deny?

On 2002-02-09, Brandon High wrote: >> >> should I open(accept) or close(deny, perhaps reject?) the port 113??? [...] >I just don't know what you might need the ident server for. That's why you should read that thread. It was explained there several times, IIRC. s. -- (0> Jakub Jankowski [url

Re: Port 113 (auth) accept or deny?

Brandon High <[EMAIL PROTECTED]> writes: >> >> should I open(accept) or close(deny, perhaps reject?) the port 113??? >> > >> >I've got it closed on my machines. I don't know what you might need it >> >for. >> >> We've been through at least once, haven't we? *sigh* Obligatory link:

Re: Port 113 (auth) accept or deny?

On Sat, Feb 09, 2002 at 10:07:45PM +0100, Jakub Jankowski wrote: > On 2002-02-09, Brandon High wrote: > > [...] > >> should I open(accept) or close(deny, perhaps reject?) the port 113??? > > > >I've got it closed on my machines. I don't know what you might need it > >for. > > We've been through a

Re: Port 113 (auth) accept or deny?

On 2002-02-09, Brandon High wrote: [...] >> should I open(accept) or close(deny, perhaps reject?) the port 113??? > >I've got it closed on my machines. I don't know what you might need it >for. We've been through at least once, haven't we? *sigh* Please read the whole thread: http://lists.debian

Re: Port 113 (auth) accept or deny?

On Sat, Feb 09, 2002 at 09:39:00PM +0100, Johannes Weiss wrote: > > Hi, > I have a security question: > On my HTTP(s)/MAIL(SMTP,POP,IMAP)/SSH-Server: > should I open(accept) or close(deny, perhaps reject?) the port 113??? Accept if you've chosen to run an ident server; otherwise, reject, but don'

Re: Port 113 (auth) accept or deny?

On Sat, Feb 09, 2002 at 09:39:00PM +0100, Johannes Weiss wrote: > I have a security question: > On my HTTP(s)/MAIL(SMTP,POP,IMAP)/SSH-Server: > should I open(accept) or close(deny, perhaps reject?) the port 113??? I've got it closed on my machines. I don't know what you might need it for. -B --

Re: Port 113 (auth) accept or deny?

On 2002-02-09, Brandon High wrote: >> >> should I open(accept) or close(deny, perhaps reject?) the port 113??? [...] >I just don't know what you might need the ident server for. That's why you should read that thread. It was explained there several times, IIRC. s. -- (0> Jakub Jankowski [ur

Re: Port 113 (auth) accept or deny?

Brandon High <[EMAIL PROTECTED]> writes: >> >> should I open(accept) or close(deny, perhaps reject?) the port 113??? >> > >> >I've got it closed on my machines. I don't know what you might need it >> >for. >> >> We've been through at least once, haven't we? *sigh* Obligatory link:

Re: Port 113 (auth) accept or deny?

On Sat, Feb 09, 2002 at 10:07:45PM +0100, Jakub Jankowski wrote: > On 2002-02-09, Brandon High wrote: > > [...] > >> should I open(accept) or close(deny, perhaps reject?) the port 113??? > > > >I've got it closed on my machines. I don't know what you might need it > >for. > > We've been through

Re: Port 113 (auth) accept or deny?

On 2002-02-09, Brandon High wrote: [...] >> should I open(accept) or close(deny, perhaps reject?) the port 113??? > >I've got it closed on my machines. I don't know what you might need it >for. We've been through at least once, haven't we? *sigh* Please read the whole thread: http://lists.debia

Re: Port 113 (auth) accept or deny?

On Sat, Feb 09, 2002 at 09:39:00PM +0100, Johannes Weiss wrote: > > Hi, > I have a security question: > On my HTTP(s)/MAIL(SMTP,POP,IMAP)/SSH-Server: > should I open(accept) or close(deny, perhaps reject?) the port 113??? Accept if you've chosen to run an ident server; otherwise, reject, but don

Re: Port 113 (auth) accept or deny?

On Sat, Feb 09, 2002 at 09:39:00PM +0100, Johannes Weiss wrote: > I have a security question: > On my HTTP(s)/MAIL(SMTP,POP,IMAP)/SSH-Server: > should I open(accept) or close(deny, perhaps reject?) the port 113??? I've got it closed on my machines. I don't know what you might need it for. -B --