Re: X security (was Re: nmap -sT and open ports from a friends)

2006-02-07 Thread Steven Wheelwright
On Fri, Feb 03, 2006 at 06:33:30PM -0500, Daniel Sterling wrote: > Adding a firewall will only help things, and it certainly can't hurt. This is generally true, but an improperly configured firewall can be worse than no firewall. If it creates new vulnerabilities, or if it is obtrusive and causes

Re: nmap -sT and open ports from a friends

2006-02-03 Thread Daniel Givens
> The 'filtered' ones are probably filtered by your ISP. I can understand (but > don't share) why they block port 25 or port 445) but I wonder why a ISP > would filter out port 80, aren't people allowed to have a web server at home? I don't know if you remember the CodeRed and Nimba worms that wer

X security (was Re: nmap -sT and open ports from a friends)

2006-02-03 Thread Daniel Sterling
X in Debian by default uses -nolisten tcp, why is it open? Also, read the XSecurity man page-- just because the port is open does not mean it is accessible. However, you should as a rule disable anything that listens to the internet if you don't need it. You should also, if possible, use hos

Re: nmap -sT and open ports from a friends

2006-02-03 Thread Javier Fernández-Sanguino Peña
On Fri, Feb 03, 2006 at 11:02:33PM +0100, [EMAIL PROTECTED] wrote: > Hi, > > this is the nmap -sT scan from a friend: I guess you both are not in the same ISP > > > nmap -sT internet_address > > Port State Service > 25/tcp filteredsmtp > 46/tcp openmpm-snd > 8

Re: nmap -sT and open ports from a friends

2006-02-03 Thread Nate Sanders
He has no firewall (like me) as he's saying a firewall is nothing good and not usefull but there's an open X11 server available in the internet. A firewall is one of the best things you can have and should always run. Isn't this vulnerable without a firewall ? Yes. Both of you should s

nmap -sT and open ports from a friends

2006-02-03 Thread Mark-Walter
Hi, this is the nmap -sT scan from a friend: > nmap -sT internet_address Port State Service 25/tcp filteredsmtp 46/tcp openmpm-snd 80/tcp filtered http 119/tcp open nntp 445/tcp filtered microsoft-ds 1080/tcp filtered socks 600