open ports?

amer_58 · 03-27-2005, 11:52 AM

After i scanned my IP for an open ports using nmap this is what I got:

22/tcp open ssh
25/tcp open smtp
37/tcp open time
113/tcp open auth
587/tcp open submission
6000/tcp open X11

I am not really sure why the ssh port is open, I haven't opened it,However;can someone tell me if those ports are fine or Do I need to close any of them?

thanks.

DoubleOTeC · 03-27-2005, 12:12 PM

sshd may be starting by default.

It depends on what ports you want open or what services you want accessible to other users.

Is this machine connected directly to the internet?

amer_58 · 03-27-2005, 12:16 PM

This machine connected to my hub, I share my connection through my server(Windwos 2003).

I might be accessing my linux box through my server though, I use(PenguiNet).

DoubleOTeC · 03-27-2005, 12:26 PM

Ok...

Unless you specifically want to close the ports, then your machine should be safe from internet attacks (assuming that that was your concern)

amer_58 · 03-27-2005, 12:29 PM

What I meant is with these open ports am I safe from any internet attacks.

GUIPenguin · 03-27-2005, 12:30 PM

Personaly I wouldnt my self trust a windows pc as being a gateway...You should also look into a linux firewall like ipcop for even more protection....or build your own. www.ipcop.org

do you have any firewall setup on your linux box like iptables rule sets?

it all depends if they can get past your windos box, or you have ports forworded then it depends on any vulnerabilities in the services that are running like old version of openssh, etc

amer_58 · 03-27-2005, 12:35 PM

I havent setup any firewall on my linux machine!!! I thought having a client machine would be safe(192.168.0000) As soon as my server is secure!!

Please guide if am misssing anythnig.

Thanks.

GUIPenguin · 03-27-2005, 12:40 PM

well I havnt used windows for a while...but I figure it is still as insecure as is has been for years. It really woulnt hurt anything to setup an iptables firewall, google for it but basicly you want to reject everything then just accept what you want...like

iptables -A INPUT -p tcp --dport ssh -j ACCEPT
which would accept ssh (22) port

you could use firestarter as a start....it should get you a basic working forewall in a few min using iptables rules.

http://www.fs-security.com/

amer_58 · 03-27-2005, 12:45 PM

Thanks GUIPenguin i am downloading now firestarter.