|
Posted by Stefan Kanthak on November 16, 2006, 1:56 pm
If you were Registered and logged in, you could reply and use other advanced thread options
> Port 80 is the web server port. Port 443 is the secure connection port for
> a web server when using a digital security certificate for https
> connections.
Correct!
> If these ports are open, and you have no need for them, block them in the
> firewall.
WRONG!
If these ports are unintentionally open, close and uninstall the application
which opens them! Don't just treat the symptoms but CURE THE CAUSE!
> Tom
> | Hello Engel, I ran the two checks in the first link and both came back as
> | Perfect Stealth.
Complete NONSENSE. There ain't nothing like "stealth" with TCP: either a port
is open and accepts connections or it is closed and rejects connections. Any
other behaviour is a violation of the TCP/IP protocol! It needs quite a portion
of chuzpe to connect a host with a defective IP stack to any IP network like
the Internet.
If some device along the path SILENTLY drops (ICMP) packets this is known as
a "black hole", but can be detected: the device/router in front of the "black
hole" responds with "host unreachable" if the addressed device is not present.
AND: it's COMPLETELY useless and ridiculous to play hide and seek! No attacker
probes your host first and attacks it only in case of a reply.
Stefan
PS: top posting is BAD, and using OLEXP with it's ridiculous presets creates
garbage like the following: who wrote which lines?!
> The second link wouldn't connect to website, maybe wrong
> | url? The third link to Symantec came back as Network Vurnerability, ports
> 80
> | and 443 open. That is the one that I have been concerned about, although
> I
> | ran it from a different Symantec loctation it is basically the same one.
> Now
> | what?
> | --
> | Randu
> |
> |
> | "Engel" wrote:
> |
> | > Hello Randu,
> | >
> | > Check your ports
> | > http://grc.com/default.htm
> | > (clics en ShieldsUP! > Proceed > Common Ports, o All Service Ports)
> | >
> | > http://scan.sygatetech.com/quickscan.html
> | >
> | > http://security.symantec.com/ssc/sc_scan.asp
> | > --
> | >
> | > "Randu" wrote:
> | >
> | > > I am not familiar with port operation, but when I run security checks
> I am
> | > > told there is a "hacker threat" because these ports are open. They
> are the
> | > > hppt and https ports and I don't know why this is a problem. I am
> fairly
> | > > certain there are no virus ,spyware, malware, etc. on my system. What
> should
> | > > I check? Symantec has not been very helpful. Windows XP SP2.
> | > > --
> | > > Randu
>
>
|