-2
votes
2answers
101 views

List of TCP & UDP ports known to be used by malware, etc [closed]

Where can I find a regularly updated, downloadable list of TCP & UDP ports that are known to be commonly used by malware, trojans, etc.? This is for import into an IT asset management system to ...
2
votes
2answers
582 views

ESXi network setup for isolated internal virtual machines

Using ESXi v5.1 and vSphere, my networking is setup like so: One standard Switch: vSwitch0 vSwitch0 has one uplink physical adapter (Internet connected) vSwitch0 VM Network has 3 virtual machines ...
1
vote
2answers
152 views

How to implement firewall in LAN(out of users' os) like EC2 have done?

In aws ec2, users can set up security groups which works like a firewall, usually, firewall work behind a gateway/nat server, however, I found that firewall in EC2 works in the LAN, too. For example, ...
1
vote
1answer
540 views

Changing TCP/IP IPID sequence generation algorithm on Windows Server

a recent security review on a customers webserver yielded the following results: "[...] The system under test is using incremental ip ids. This means that every outgoing ip packet has an ...
4
votes
6answers
572 views

Networking security and TCP/IP internals books/sites

I am searching for good books and articles about TCP/IP, mainly the security aspects of TCP/IP protocols. I have TCP/IP Illustrated and the TCP Guide, but they kinda lack on description of 'classic' ...
1
vote
1answer
1k views

Can someone explain what this vulnerability means?

I'm having a bit of a problem getting my head round what this vulnerability means, can someone help me understand this? I'm particularly puzzled by the RESULTS section. Why would source port 25 be ...
4
votes
2answers
7k views

Windows 7 TCP Listen Ports

My fresh install of Windows 7 shows 5 programs listening on TCP ephermeral ports: TCP 0.0.0.0:49152 0.0.0.0:0 LISTENING TCP 0.0.0.0:49153 0.0.0.0:0 ...
0
votes
5answers
1k views

What ports are least likely to be probed on the internet?

Suppose you've got a server that runs insecure software and you have to make it publicly accessible, what ports are "safest" for providing that service on the internet. By "safest" I mean least likely ...
4
votes
2answers
6k views

How Can I Harden the TCP/IP Stack in Windows Server 2008? [duplicate]

I would like to make sure that my Windows 2008 servers are hardened against DDOS attacks. There is a Microsoft Technet article on Hardening the TCP/IP stack, but it was last revised in January 2006. ...
1
vote
2answers
3k views

(D)DOS - tcpdump established connections analysis (too many established connections)

┬┐How can I debug this problem? (I've got full tcpdump captures) I have a TCP server into which many clients establish persistent connections. Normally all these clients behave, and I never reach ...