|
EH-Net
|
|
May 24, 2013, 07:03:22 PM
|
|
1773
|
Ethical Hacking Discussions and Related Certifications / Network Pen Testing / Re: Weird Firewall scan results
|
on: March 21, 2007, 09:43:57 AM
|
|
Thanks for the suggestions guys.
I know that the ISP doesn't have anything in place to stop me from running servers. I specifically have static IP addresses so that I can do so. I have also been able to access the web server with no problems when the rules are in place.
I'll try the ideas though, probably starting with trying to telnet to those ports and see what happens. When I get home again tonight I'll try connecting via crossover to my external interface to scan the firewall.
There shouldn't be any other rules in place, as I have flushed everything, created drop all policies, and only added the 4 specific rules for inbound/outbound to allow SSH/WebTool access.
Thanks again for the ideas, I'll keep you guys updated as to what I find out.
|
|
|
|
|
1777
|
Ethical Hacking Discussions and Related Certifications / Network Pen Testing / Re: Weird Firewall scan results
|
on: March 20, 2007, 07:03:34 PM
|
|
The connect scan did return port 1023. I'm not sure why the stealth scan did not. Haha, yeah, I'm sure I scanned the right IP.. and yes I can reach SSH and the WebTool with no problems.
A traceroute from outside goes from the gateway to my firewall and then the firewall reply continues. So that's what? A proxy? I wonder if those scan results are reflective from something my ISP has setup in front of my firewall.
The only box with services I have (which isn't even running at the moment, nor are the firewall rules setup for it) is an all-in-one linux web server. But those rules aren't active as I've only enabled the SSH/WebTool rules.
|
|
|
|
|
1781
|
Ethical Hacking Discussions and Related Certifications / Network Pen Testing / Weird Firewall scan results
|
on: March 20, 2007, 02:16:57 PM
|
|
Alright,
So I still haven't given up on getting this EnGarde Linux fully functional. I finally fixed my other issues and everything seems to be working correctly on the box itself. I decided to run an nmap scan on it from an external IP to see the results (expecting to see all ports closed). However, this is the list of open ports I received:
21, 25, 3389, 443, 80, 113, 22, 8080, 1720, 1352, 7070, and 139.
Now, my current firewall (iptables) rules are set to a drop policy on input, output and forward. The only accept rules I have in place are to allow me access from the IP doing the scan to SSH and the admin WebTool (1023) for the software. Why in the world is it reporting all of these other ports open? Anyone have any ideas?
|
|
|
|
|
1784
|
Ethical Hacking Discussions and Related Certifications / Network Pen Testing / Re: VMWare
|
on: March 19, 2007, 10:18:48 PM
|
|
According to that, you have 2 slots available. They can hold a maximum of 1Gb DDR2 (2x512) memory. Since you currently have 1x256, I would recommend that you either buy a second 256, or by 2x512 and max your machine out at the 1Gb.
As for the speed, from that list it doesn't show (or that I see) anything. Like I said, the easiest way is to open your computer, pull out the memory module and look on the sticker on the side. It'll either say something like 400, or PC2 3200.
|
|
|
|
|
Loading...
|