513 − login, actually rlogin, aka Remote Login. No relation to the standard /bin/login that we use every time
we log in. Sounds dangerous, and is. High risk, and LAN only if really needed.
514 (TCP) − shell is the nickname, and how netstat shows it. Actually, rsh is the application for "Remote
Shell". Like all the "r" commands, this is a throw back to kindler, gentler times. Very insecure, so high risk,
and LAN only usage, if at all.
514 (UDP) − syslog daemon port, only used for remote logging purposes. The average user does not need
this. Probably low risk, but definitely LAN only if really required.
515 − lp or print server port. High risk, and LAN only of course. Someone on the other side of the world
does not want to use your printer for it's intended purpose!
587 − MSA, or "submission", the Mail Submission Agent protocol. A new mail handling protocol supported
by most MTA's (mail servers). Low risk.
631 − the CUPS (print daemon) web management port. LAN only, low risk.
635 − mountd, part of NFS. LAN use only.
901 − SWAT, Samba Web Administration Tool port. LAN only.
993 − IMAP over SSL, secure IMAP mail service. Very low risk.
995 − POP over SSL, secure POP mail service. Very low risk.
1024 − This is the first "unprivileged" port, which is dynamically assigned by the kernel to whatever
application requests it. This can be almost anything. Ditto for ports just above this.
1080 − Socks Proxy server. A favorite crack target.
1243 − SubSeven Trojan. Windows only problem.
1433 − MS SQL server port. A sometimes target. N/A on Linux.
2049 − nfsd, Network File Service Daemon port. High risk, and LAN usage only is recommended.
3128 − Squid proxy server port. Low risk, but for most should be LAN only.
3306 − MySQL server port. Low risk, but for most should be LAN only.
5432 − PostgreSQL server port. LAN only, relatively low risk.
5631 (TCP), 5632 (UDP) − PCAnywhere ports. Windows only. PCAnywhere can be quite "noisy", and
broadcast wide address ranges.
Security Quick−Start HOWTO for Red Hat Linux
8.2. Common Ports 47
Commenti su questo manuale