0
votes
0answers
32 views

Dell 5548P, MIB value for port security violation notification

Anyone have idea on MIB values(OID value) for Port security violation notification with dell 5548P switches.On Cisco its [1.3.6.1.4.1.9.9.315.0], not sure whether i can use the same for montioring ...
0
votes
1answer
128 views

Failed PCI DSS Compliance

I got this from my compliance check results. To me it looks like my router is responding to their test but I'm not sure where to go . ( might be off track completely though) Description: PCI DSS ...
-2
votes
1answer
44 views

Random port in Filtered state for brief amount of time found using nmap , possible trojan?

Nmap results show me port 3527 open for brief period of time and then it disappears. I have a feeling this could be trojan communicating with mothership. Or something normal, but I cannot find much ...
-6
votes
1answer
50 views

Change original port number [closed]

The default port number for ssh is 22 is there a way to implement security by being obscure and changing the original number? So for example ssh would not be on port 22 it would be on lets say 2847.
0
votes
1answer
47 views

A way to only allow some ports on windows server

I have been trying to make this work the last few hours but haven't come far. I have a windows server 2008 and a set up Local Security Policy firewall yet "no" inbound rules (yet). My domains look ...
0
votes
1answer
2k views

Open port 8009/tcp on Fortigate necessary?

A nmap scan of a Fortigate Firewall showed that TCP port 8009 open is. According to knowledge base articles this is only to download the client for ssl vpn. Is this port used for anything else, and if ...
0
votes
1answer
59 views

Blocking Port 22 From Unknown IPs Security Measure

A server I'm working on has blocked all unknown addresses from accessing port 22 (via a firewall). An IP address has to be added to the firewall first via a control panel (or command line) before it ...
0
votes
1answer
72 views

Opening ec2 ports using security groups

I'm trying to open all ports up to a micro instance that I have set up, but it doesn't seem to be working. This is what I have: http://i.imgur.com/PHekagS.png Using paping, I find that port 22 is ...
-1
votes
1answer
117 views

psad does not detect nmap [closed]

I am new to this and just installed psad. I ran nmap several times on a server but psad didn't log this psad --Status. I configured it like this: ...
3
votes
5answers
2k views

When would I open Port 53 for DNS?

Locking down an application server. The server hosts a web app that is served via http. There are a few other ports open as well. Port 53 is open for DNS. Why would I need this? Extra: (Do not ...
1
vote
4answers
54 views

Mongo security users & ports

As long as my mongo port is not accessible to the outside world and only available locally, can I go about without securing my database with a username and password?
1
vote
1answer
97 views

Is opening port 80 for basic websites ok?

I have set up IIS 7.5 with some web applications, that are meant for internal use as well as for some of our customers. The information inside them is important to some extent, but not like credit ...
-1
votes
1answer
108 views

Server port scan detector [closed]

For Linux, what is the best program/daemon out there that would detect, block, and report computers scanning the server's ports, sequentially or randomly, for SSH, MySQL, popular web-based ...
0
votes
1answer
64 views

SQL Server on the internet

I've got a desktop application connecting to SQL Server directly, I see a lot of posts saying you shouldn't expose SQL Server directly to the internet but none say why. Some background: Scalability, ...
2
votes
1answer
1k views

Why does Django's dev server use port 8000 by default?

(My question isn't really about Django. It's about alternative http ports. I just happen to know Django is a relatively famous application that uses 8000 by default, so it's illustrative.) I have a ...
0
votes
3answers
10k views

Port 22 is closed even with Firewall turned off [closed]

I'm trying to open port 22 on my local machine (Windows 7 32 bit). I'm using a web tool to check if my port is open. It says that port 22 is closed. So I disabled firewall to see if it causes port to ...
0
votes
2answers
412 views

Nmap / Batch: alert if only ports usually closed are opened?

Context I check open ports on my server with a scheduled batch file: nmap.exe server1 server2 server3 etc >> log.txt Usually 21, 22, 80, 443 and 3389 are opened. Now I want to send an email ...
1
vote
0answers
183 views

ejabberd changing ports?

I changed the ports in the listen section (just added a 1 in front of them) in the /etc/ejabberd/ejabberd.cfg, but after a /etc/init.d/ejabberd restart The server still listens on the original ...
1
vote
2answers
377 views

Unknown process on port, lsof no help, nfs-kernel-server?

During a standard security sweep we found out a something was listening on a port unknown to us, 2030, and we are having trouble determining the source. # netstat -anp | grep LIST tcp 0 0 ...
2
votes
1answer
90 views

Can I change the port for SSH on a hosted server?

I am changing over to a hosted server and I want to use non-standard ports for SSH. Is this possible? Wouldn't I have to have access to the router, in order to forward ports?
3
votes
4answers
7k views

nmap on my webserver shows TCP ports 554 and 7070 open

I have a webserver that hosts various websites for me. The two services that are accessible outside are SSH and Apache2. These are running on a non-standard and standard port, respectively. All other ...
43
votes
11answers
5k views

Does changing default port number actually increase security?

I have seen advice saying you should use different port numbers for private applications (e.g. intranet, private database, anything that no outsider will use). I am not entirely convinced that can ...
-2
votes
1answer
125 views

Convention for using ports in the 100-105 range

Is there a conventions for using/not using ports in the 100-105 range for e.g. webservices? Most browsers seem to block these for security reasons. Update The "most browser" statement is based on a ...
0
votes
2answers
337 views

Opening common ports - does it make a network more vulnerable/susceptible to attack?

Our network admins/security admin make the case that we should keep common (external facing) ports (FTP, XMPP, IMAP, IPSEC) closed as it is a greater security risk and makes us more susceptible to ...
1
vote
1answer
90 views

Concerns regarding exposing ip and open port

I've written a server. It's written in java and only sorts connections away if they've connected within the last second. I'm concerned about exposing my IP and which port is open. What are the ...
0
votes
2answers
50 views

Close ports only on a specified network interface

I've just checked with nmap a proxy server (ubuntu 10.04 with squid) for vulnerabilities and I decided to start an hardening process... Is it possible to close, for example, ssh port only on eth1? So ...
2
votes
2answers
104 views

General firewall / security procedures for webservers & databases

My webserver and database server are separate. All I've done to secure the webserver is used ufw and denied from all except ports 22, 80, and 443. What else really needs to be done there? On my ...
0
votes
0answers
658 views

changing ssh port. Useful?

i will buy a dedicated server soon. I would like to know if changing the default port of ssh may be useful for security or it's completly useless. And if it's useful which ports range should I change ...
3
votes
3answers
1k views

OpenBSD has open ports in default installation

I have been considering replacing Ubuntu with OpenBSD to improve the security on my local server. I need to have ssh access to it, and I also need it to serve static web content - so the only ports I ...
0
votes
1answer
516 views

Disabling certain JBoss ports

We are trying to configure JBoss 5.1.0 to be as lightweight and as secure as possible. One of the parts of this process is to identify and close any ports we do not need. Three ports that we have ...
1
vote
2answers
661 views

Hide port in URL when 80/433 already in use

I need to add another secure instance of Tomcat in a server that already uses port 80 and port 433. Is there any way to hide the port number of the new instance, since I'll need to use one which is ...
-1
votes
1answer
137 views

is opening DNZ will cause security problem? [closed]

I build a home server with Xampp. When route my local ip addres with NAT there is virtual server and DNZ. If I only full fiel virtual server my http port not opens.if I enable DNZ then I can reach my ...
2
votes
2answers
166 views

Can I run a web site from my home network without jeapordizing other computers on my LAN? [closed]

I have a home LAN with 5 computers and a NAS, all connected to a Linksys router which is connected to my Cox cable modem. I'm interested in having one of my computers run an IIS-based web site and to ...
0
votes
3answers
90 views

What is the rules of ports?

I mean the port to connecting.. just like SSH port, nginx port, etc. Im not clear about the port. So far I can see port running not more than 5 characters (port xxxxx). So, when choosing port ...
4
votes
3answers
613 views

How to detect which process is doing a port scan

I have Linux server running a unauthorized process (which I do not know the name of) which is doing a port scan from the server out to the internet. How do I find out which process this is and kill ...
1
vote
4answers
424 views

How to secure local servers?

I have solr (an http web server used for searching) runs on port 8334, rabbitmq messaging server runs on port 6633. In the same machine, I have the web server which is accessed from outside world. ...
3
votes
1answer
148 views

Firewall Port Mapping, Good or Bad?

Is it worth the trouble to map open ports in the firewall from some inconspicuous port number to the correct port number for a given service? Or is it simpler and similarly secure just to present ...
0
votes
5answers
2k views

What ports are least likely to be probed on the internet?

Suppose you've got a server that runs insecure software and you have to make it publicly accessible, what ports are "safest" for providing that service on the internet. By "safest" I mean least likely ...
0
votes
2answers
2k views

Windows Services - Common Ports to Open in Firewall

I've always had trouble finding firewall port information for some windows-based software/services. For example,http://support.microsoft.com/kb/832017 gives me the ports but there's no differentiation ...
4
votes
12answers
2k views

nmap shows opened port but netstat doesn't

If I scan my server with nmap, it shows that 21 port is opened. But when I login into this server and run netstat, I see nothing. $ nmap -sT server Starting Nmap 4.76 ( http://nmap.org ) at ...
0
votes
4answers
2k views

What firewall rules should be used for a home based system [closed]

I'm just setting up a home wireless network with connection to the internet. The router has settings to configure the firewall rules. Currently it's set to INBOUND ALL ANY and OUTBOUND ALL ANY. ...
3
votes
3answers
6k views

Port 135 / epmap

I'm looking at securing a web server (Windows Server 2008). A GRC port scan recommended that I close down port 135 (https://www.grc.com/port_135.htm). However, I've done this before with Windows ...