Red Hat NETSCAPE MANAGEMENT SYSTEM 6.2 - COMMAND-LINE Guida di Installazione Pagina 49
- Pagina / 82
- Indice
- SEGNALIBRI
Valutato. / 5. Basato su recensioni clienti
69 − tftp, or Trivial File Transfer Protocol. Extremely insecure. LAN only, if really, really needed.
79 − Finger, used to provide information about the system, and logged in users. Low risk as a crack target,
but gives out way too much information and should not be run.
80 − WWW or HTTP standard web server port. The most commonly used service on the Internet. Low risk.
98 − Linuxconf web access administrative port. LAN only, if really needed at all.
110 − POP3, aka Post Office Protocol, mail server port. POP mail is mail that the user retrieves from a
remote system. Low risk.
111 − sunrpc (Sun Remote Procedure Call), or portmapper port. Used by NFS (Network File System), NIS
(Network Information Service), and various related services. Sounds dangerous and is high risk. LAN use
only. A favorite crack target.
113 − identd, or auth, server port. Used, and sometimes required, by some older style services (like SMTP
and IRC) to validate the connection. Probably not needed in most cases. Low risk, but could give an attacker
too much information about your system.
119 −− nntp or news server port. Low risk.
123 − Network Time Protocol for synchronizing with time servers where a high degree of accuracy is
required. Low risk, but probably not required for most users. rdate makes an easier and more secure way of
updating the system clock. And then inetd's built in time service for synchronizing LAN systems is another
option.
137−139 − NetBios (SMB) services. Mostly a Windows thing. Low risk on Linux, but LAN use only. 137 is
a very commonly seen port attempt. A rather obnoxious protocol from Redmond that generates a lot of
"noise", much of which is harmless.
143 − IMAP, Interim Mail Access Protocol. Another mail retrieval protocol. Low to moderate risk.
161 − SNMP, Simple Network Management Protocol. More commonly used in routers and switches to
monitor statistics and vital signs. Not needed for most of us, and low risk.
177 − XDMCP, the X Display Management Control Protocol for remote connections to X servers. Low risk,
but LAN only is recommended.
443 − HTTPS, a secure HTTP (WWW) protocol in fairly wide use. Low risk.
465 − SMTP over SSL, secure mail server protocol. Low risk.
512 (TCP) − exec is how it shows in netstat. Actually the proper name is rexec, for Remote Execution.
Sounds dangerous, and is. High risk, LAN only if at all.
512 (UDP) − biff, a mail notification protocol. Low risk, LAN only.
Security Quick−Start HOWTO for Red Hat Linux
8.2. Common Ports 46
- Hal Burgiss 1
- Table of Contents 2
- 1. Introduction 4
- 1.2. Notes 5
- 1.3. Copyright 5
- 1.4. Credits 6
- 1.5. Disclaimer 6
- 1.7. Feedback 7
- 2. Foreword 8
- 2.2. Before We Start 9
- 3.1. System Audit 10
- 3.3. Stopping Services 12
- 3.3.1. Stopping Init Services 13
- 3.3.2. Inetd 14
- 3.3.2. Inetd 12 15
- 3.3.3. Xinetd 16
- 3.3.4. When All Else Fails 17
- 3.4. Exceptions 18
- 4. Step 2: Updating 20
- 4. Step 2: Updating 18 21
- 5.1. Strategy 22
- 5.2.1. ipchains 23
- 5.2.1. ipchains 21 24
- 5.2.2. iptables 26
- 5.2.2. iptables 24 27
- 5.3. Tcpwrappers (libwrap) 29
- 5.3.1. xinetd 31
- 5.4. PortSentry 32
- 5.5. Proxies 32
- 5.6. Individual Applications 33
- 5.7. Verifying 35
- 5.8. Logging 36
- 5.9. Where to Start 37
- 6. Intrusion Detection 39
- # chattr +i /bin/ps 40
- −−−i−−−−−−−−−− /bin/ps 40
- # chattr −i /bin/ps 40
- 7. General Tips 43
- # must exist 44
- root: hal@bigcat 44
- 8. Appendix 46
- 8.2. Common Ports 48
- 8.3. Netstat Tutorial 51
- 8.4. Attacks and Threats 59
- 8.4.2. Rootkits 60
- 8.4.3. Worms and Zombies 60
- 8.4.4. Script Kiddies 61
- 8.4.5. Spoofed IPs 61
- 8.4.6. Targeted Attacks 61
- 8.4.8. Brute Force 62
- 8.5. Links 63
- 8.6. Editing Text Files 65
- 8.7. nmap 68
- 8.8. Sysctl Options 71
- 8.8. Sysctl Options 69 72
- 8.9. Secure Alternatives 73
- 8.9. Secure Alternatives 71 74
- 8.9. Secure Alternatives 72 75
- 8.9. Secure Alternatives 73 76
- 8.10.2. iptables II 77
- 8.10.2. iptables II 75 78
- 8.10.2. iptables II 76 79
- 8.10.2. iptables II 77 80
- 8.10.3. Summary 81
- 8.10.4. iptables mini−me 82
© 2020, manymanuals.it. Tutti i diritti riservati | 0.018 s |
Manymanuals.com
Manymanuals.de
Manymanuals.fr
Manymanuals.it
Manymanuals.pl
Manymanuals.cz
Manymanuals.es
Manymanuals-pt.com
Commenti su questo manuale