Tell me more ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.
up vote 10 down vote favorite
1

I'd like to set some linux services to non-standard ports - what's the highest valid port number?

share|improve this question

2 Answers

up vote 12 down vote accepted

(2^16)-1, or 0-65,535 (the -1 is because port 0 is reserved and unavailable). (edited because o_O Tync reminded me that we can't use port 0, and Steve Folly reminded me that you asked for the highest port, not the number of ports)

But you're probably going about this the wrong way. There are people who argue for and against non-standard ports. I say they're irrelevant except to the most casual scanner, and the most casual scanner can be kept at bay by using up-to-date software and proper firewall techniques, along with strong passwords. In other words, security best practices.

share|improve this answer
-1 for the wrong answer. Try 65,535. But good point about the argument for/against non-standard ports. – Steve Folly Jan 18 '10 at 0:00
There are security/compliance people who force these sorts of decisions. We run SMTP services on a predetermined high port to protect us against the security officer's office harassing us. – duffbeer703 Jan 18 '10 at 0:01
Steve, edited, and you're right. I answered the wrong question with my number :) – Matt Simmons Jan 18 '10 at 0:03
@Matt: removed -1 :-) – Steve Folly Jan 18 '10 at 0:05
I monitor attempts to login with ssh and multiple attempts have the IP blocked (standard CPanel VPS solution). I'm just trying to reduce the number of attempts I have to look at each day. Port scanning is also blocked so that should reduce that crowd. I'm also considering a VPN, but it seemed changing the port would be an easier first step. – Yehosef Jan 18 '10 at 0:06
show 2 more comments
up vote 7 down vote

1-65535 are available, and ports in range 1-1023 are the privileged ones: an application needs to be run as root in order to listen to these ports.

share|improve this answer
3  
No no. Ports 1-1023 are privileged ports. – Steve Folly Jan 18 '10 at 0:03

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.