Ethical Hacking

Learn to find vulnerabilities before the bad guys do! Gain real world hands on hacking experience in our state of the art hacking lab. Course designed and taught by expert instructors with years of penetration testing experience. 12 student maximum in every class. Certification attempt included in every package.
Computer Forensics Training at InfoSec Institute

Gain the in-demand skills of a certified computer examiner, learn to recover trace data left behind by fraud, theft, and cybercrime perpetrators. Discover the source of computer crime and abuse at your organization so that it never happens again. All of our class sizes are guaranteed to be 12 students or less to facilitate one-on-one interaction with one of our expert instructors.




Network Security Pen-Test
[Top] [All Lists]

Re: Re: Strange ports

Subject: Re: Re: Strange ports
Date: Fri, 22 Jun 2007 13:24:09 -0500 (CDT)

Per the original note - this was a scan of an external firewall.

There is no reason for udp/53 to be open unless this is a stateless
firewall (doubtful per the scan).  Internal clients would be coming
through the internal interface of the firewall and udp/53 would need to be
opened on that interface not the external interface.

But to be quite frank - I am shocked how many people are weighing in on
what "needs to be opened" without knowing one single requirement.  He
asked an opinion on a couple of ports.  What is opened or not depends upon
that companies architecture and how they have things deployed.  He needs
to work with those folks to determine what is valid or not.

t.s


I would agree that port 53 UDP needs to be open.  Port 53 TCP does not
unless you are doing large DNS zone transfers.

------------------------------------------------------------------------
This List Sponsored by: Cenzic

Are you using SPI, Watchfire or WhiteHat?
Consider getting clear vision with Cenzic
See HOW Now with our 20/20 program!

http://www.cenzic.com/c/2020
------------------------------------------------------------------------




------------------------------------------------------------------------
This List Sponsored by: Cenzic

Are you using SPI, Watchfire or WhiteHat?
Consider getting clear vision with Cenzic
See HOW Now with our 20/20 program!

http://www.cenzic.com/c/2020
------------------------------------------------------------------------

<Prev in Thread] Current Thread [Next in Thread>