onko ok?
FTP DATA
20
BLOCKED
This port has not responded to any of our probes. It appears to be completely stealthed.
FTP
21
BLOCKED
This port has not responded to any of our probes. It appears to be completely stealthed.
SSH
22
BLOCKED
This port has not responded to any of our probes. It appears to be completely stealthed.
TELNET
23
BLOCKED
This port has not responded to any of our probes. It appears to be completely stealthed.
SMTP
25
BLOCKED
This port has not responded to any of our probes. It appears to be completely stealthed.
DNS
53
BLOCKED
This port has not responded to any of our probes. It appears to be completely stealthed.
DCC
59
BLOCKED
This port has not responded to any of our probes. It appears to be completely stealthed.
FINGER
79
BLOCKED
This port has not responded to any of our probes. It appears to be completely stealthed.
WEB
80
BLOCKED
This port has not responded to any of our probes. It appears to be completely stealthed.
POP3
110
BLOCKED
This port has not responded to any of our probes. It appears to be completely stealthed.
IDENT
113
BLOCKED
This port has not responded to any of our probes. It appears to be completely stealthed.
Location Service
135
BLOCKED
This port has not responded to any of our probes. It appears to be completely stealthed.
NetBIOS
139
BLOCKED
This port has not responded to any of our probes. It appears to be completely stealthed.
HTTPS
443
BLOCKED
This port has not responded to any of our probes. It appears to be completely stealthed.
Server Message Block
445
BLOCKED
This port has not responded to any of our probes. It appears to be completely stealthed.
SOCKS PROXY
1080
BLOCKED
This port has not responded to any of our probes. It appears to be completely stealthed.
UPnP
5000
BLOCKED
This port has not responded to any of our probes. It appears to be completely stealthed.
WEB PROXY
8080
BLOCKED
This port has not responded to any of our probes. It appears to be completely stealthed.
ja
ICMP
8
OPEN
An ICMP ping request is usually used to test Internet access. However, an attacker can use it to determine if your computer is available and what OS you are running. This gives him valuable information when he is determining what type of attack to use against you.
FTP DATA
20
BLOCKED
This port has not responded to any of our probes. It appears to be completely stealthed.
FTP
21
BLOCKED
This port has not responded to any of our probes. It appears to be completely stealthed.
SSH
22
BLOCKED
This port has not responded to any of our probes. It appears to be completely stealthed.
TELNET
23
BLOCKED
This port has not responded to any of our probes. It appears to be completely stealthed.
SMTP
25
BLOCKED
This port has not responded to any of our probes. It appears to be completely stealthed.
DNS
53
BLOCKED
This port has not responded to any of our probes. It appears to be completely stealthed.
DCC
59
BLOCKED
This port has not responded to any of our probes. It appears to be completely stealthed.
FINGER
79
BLOCKED
This port has not responded to any of our probes. It appears to be completely stealthed.
WEB
80
BLOCKED
This port has not responded to any of our probes. It appears to be completely stealthed.
POP3
110
BLOCKED
This port has not responded to any of our probes. It appears to be completely stealthed.
IDENT
113
BLOCKED
This port has not responded to any of our probes. It appears to be completely stealthed.
Location Service
135
BLOCKED
This port has not responded to any of our probes. It appears to be completely stealthed.
NetBIOS
139
BLOCKED
This port has not responded to any of our probes. It appears to be completely stealthed.
HTTPS
443
BLOCKED
This port has not responded to any of our probes. It appears to be completely stealthed.
Server Message Block
445
BLOCKED
This port has not responded to any of our probes. It appears to be completely stealthed.
SOCKS PROXY
1080
BLOCKED
This port has not responded to any of our probes. It appears to be completely stealthed.
UPnP
5000
BLOCKED
This port has not responded to any of our probes. It appears to be completely stealthed.
WEB PROXY
8080
BLOCKED
This port has not responded to any of our probes. It appears to be completely stealthed.
ja
ICMP
8
OPEN
An ICMP ping request is usually used to test Internet access. However, an attacker can use it to determine if your computer is available and what OS you are running. This gives him valuable information when he is determining what type of attack to use against you.
Vastaukset 12
Vanhimmat
kyllä nuo blocked-portit on hyvin, mutta ehkä kannattaisi sulkea vielä ICMP, niin sinua ei pääsisi pingaamaan yms.
miten tuo portin sulkeminen tapahtuu, tämä on uutta joten en hallitse kovin hyvin vielä tätä ubuntua.
Firestartterilla ilmeisestikö tuo hoidellaan, onko oikein noin kun tuossa kuvassa?
http://kuvax.net/i/7682_Kuvakaappaus_Preferences.png
Kuvassahan sanotaan että "allow..." eikös tämä juuri salli kaikki valitut paketit
tekeekin.
Echo request & reply kannattaa ainakin sallia, muut voit sulkea.
ainakin oma operaattori pingailee koneita muutaman kerran tunnissa ja jos ei saa vastausta niin tulkitsee että yhteyttä ei enää tarvita.
eli icmp portti 8 ei ehkä sittenkään kannata sulkea!
Aika lailla eri tyylisiä operaattoreita: itsellä on kaikki icmp suljettu ja yhteydet pelaa.
itsekin kyllä omalta koneelta kielsin pingiin vastaamisen, mutta säädin adsl-modeemi/palomuurin niin että se vastaa niihin.
kun koska kokonaan kieltäessä yhteys meni kuolleeksi aina, niin jotain piti keksiä, ettei koko ajan tarvitse riuhtoa rimpsua ifdown eth0 && ifup eth0
Jos esim irkkaat, niin toi ident 113 portti kannattaa avata. Tosin se kannattaa avata palomuurisäännöllä vain sille IRC-palvelimelle mitä käytät. Homma onnistuu helposti esim. Firestarterilla. Jos ident-portti on kiinni, niin sillon tulee ongelmia yrittäessäsi päästä irc-palvelimelle. Vähintäänkin yhteydenotto kestää kauan ja jotkut palvelimet ei päästä lainkaan sisälle, jos ident on tukittuna.
Juuri noin sen pitääkin olla. Mitään palomuurivirityksiä et tarvitse. Niistä ei ole kuin haittaa.
"Mitään palomuurivirityksiä et tarvitse. Niistä ei ole kuin haittaa."
Näin sanoo juuri Linuxin asentanut käyttäjä joka kuvittelee olevansa immuuni kaikelle internetin vaaroille. Toivottavasti joku hakkeroi koneesi, ehkä sitten ymmärrät mihin palomuuria tarvitaan.