[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: nmap -sT and open ports from a friends





He has no firewall (like me) as he's saying a firewall is nothing good
and not usefull but there's an open X11 server available in the
internet.

A firewall is one of the best things you can have and should always run.

Isn't this vulnerable without a firewall ?
Yes. Both of you should setup iptables with a minimal set that either denys certain ports, or better yet, blocks-all and only allows-specified.






Mark-Walter@t-online.de wrote:

Hi,

this is the nmap -sT scan from a friend:

nmap -sT internet_address

Port 	 State		Service
25/tcp   filtered        smtp
46/tcp   open            mpm-snd
80/tcp   filtered	http
119/tcp	 open		nntp
445/tcp  filtered	microsoft-ds
1080/tcp filtered	socks
6000/tcp open		X11
6346/tcp open		gnutella

He has no firewall (like me) as he's saying a firewall is nothing good
and not usefull but there's an open X11 server available in the
internet.

Isn't this vulnerable without a firewall ?



--
==============================================
Nate Sanders                  nate@ima.umn.edu
Associate Systems Manager     (612) 624 - 4353
          http://www.ima.umn.edu/
==============================================
Institute for Mathematics and its Applications
University of Minnesota
400 Lind Hall, 207 Church St. SE
Minneapolis, MN 55455-0463
==============================================


Reply to: