Re: What about closed ports?

[Jeld The Dark Elf <jeld@mindless.com>]

On Wed, Jul 04, 2001 at 10:56:09AM -0400, Nick Nanos wrote:
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
> 
> I'd be more worried about traffic on open ports that is MUXed i.e.
> telnet over port 80.
> 
You see, in order to do anything through port X ( 80 in your example ) you have 
to have a client ( for example telnet ) that initialises connection and a server
taht listnes for connection requests and answers them ( for example apache ). In 
any case if you have you ipchains rule say that any traffic through port 80 is DENYed
then you don't have to worry. And multiplexing is not helping the attacker it is helping you.

-- 
FRIEND: A member of the opposite sex in your acquaintance who has some flaw which makes sleeping with him/her totally unappealing.