LinuxQuestions.org
Welcome to the most active Linux Forum on the web.
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Server
User Name
Password
Linux - Server This forum is for the discussion of Linux Software used in a server related context.

Notices


Reply
  Search this Thread
Old 07-06-2017, 01:06 AM   #1
asteroid4u
Member
 
Registered: Jun 2015
Posts: 58

Rep: Reputation: Disabled
Check port open status for port 443


Hi,

I have opened port using firewall-cmd command like below:

firewall-cmd --zone=work --add-port=443/tcp --permanent

firewall-cmd --reload


firewall-cmd --list-ports
443/tcp

It showing 443/tcp is opned.

but when i check in below command

port 443 is not showing.

netstat -lntu


I want to enure port is opened from operating system end.


please help
 
Old 07-06-2017, 02:17 AM   #2
bathory
LQ Guru
 
Registered: Jun 2004
Location: Piraeus
Distribution: Slackware
Posts: 13,163
Blog Entries: 1

Rep: Reputation: 2032Reputation: 2032Reputation: 2032Reputation: 2032Reputation: 2032Reputation: 2032Reputation: 2032Reputation: 2032Reputation: 2032Reputation: 2032Reputation: 2032
Hi,
Quote:
but when i check in below command

port 443 is not showing.

netstat -lntu
Opening a port on firewall is one part. You also need a service listening on that port.
By default a ssl-enabled webserver is listening on port 443, so use your package manager to install and configure a ssl capable webserver (like apache, nginx, etc)

Regards
 
Old 07-06-2017, 03:28 AM   #3
JJJCR
Senior Member
 
Registered: Apr 2010
Posts: 2,148

Rep: Reputation: 448Reputation: 448Reputation: 448Reputation: 448Reputation: 448
As Bathory mentioned there should be an application listening to that port or utilizing 443 port.

Why did you open port 443? The application suppose to use 443, is it running?
 
Old 07-06-2017, 08:38 AM   #4
asteroid4u
Member
 
Registered: Jun 2015
Posts: 58

Original Poster
Rep: Reputation: Disabled
Hi All,

I opened port because external application is going to access my os using port 443. so just want to know it is opened from my OS end
 
Old 07-06-2017, 01:11 PM   #5
lazydog
Senior Member
 
Registered: Dec 2003
Location: The Key Stone State
Distribution: CentOS Sabayon and now Gentoo
Posts: 1,249
Blog Entries: 3

Rep: Reputation: 194Reputation: 194
Quote:
Originally Posted by asteroid4u View Post
Hi All,

I opened port because external application is going to access my os using port 443. so just want to know it is opened from my OS end
Without something listening on port 443 they are not going to connect to anything. This is why you cannot verify the port is open and the same reason a hacker cannot detect it.
 
Old 07-06-2017, 08:24 PM   #6
JJJCR
Senior Member
 
Registered: Apr 2010
Posts: 2,148

Rep: Reputation: 448Reputation: 448Reputation: 448Reputation: 448Reputation: 448
Lightbulb

Quote:
Originally Posted by asteroid4u View Post
Hi All,

I opened port because external application is going to access my os using port 443. so just want to know it is opened from my OS end
If external application is going to access via port 443, then an internal application should be ready to receive the request of the external application.

A logic would be like an Infrared, there's a transmitter and a receiver. Same logic goes with the network ports, external application connect to port 443 and internal application application ready to process the connection on port 443.

Quote:
Name:
https

Purpose:
http protocol over TLS/SSL

Description:
This port is used for secure web browser communication. Data transferred across such connections are highly resistant to eavesdropping and interception. Moreover, the identity of the remotely connected server can be verified with significant confidence. Web servers offering to accept and establish secure connections listen on this port for connections from web browsers desiring strong communication security.

Once established, web browsers inform their users of these secured connections by displaying an icon — a padlock, an unbroken key, etc. — in the status region of their window.
Quote above from this link: https://www.grc.com/port_443.htm

But if the external application is one of a kind that connects to port 443 on your network, and even though nothing is listening on port 443 and the application is able to connect to your internal network and control whatever it can control, then I think it's pure awesomeness and scary moment. Run or turn off the power or simply cut all the cables with a bolt cutter.

Last edited by JJJCR; 07-06-2017 at 08:28 PM. Reason: edit
 
1 members found this post helpful.
Old 07-06-2017, 09:04 PM   #7
asteroid4u
Member
 
Registered: Jun 2015
Posts: 58

Original Poster
Rep: Reputation: Disabled
Thanks a lot for all your Info's

what about using NMAP tool? cant we detect port open status using NMAP ?
 
Old 07-06-2017, 09:50 PM   #8
scasey
LQ Veteran
 
Registered: Feb 2013
Location: Tucson, AZ, USA
Distribution: CentOS 7.9.2009
Posts: 5,718

Rep: Reputation: 2210Reputation: 2210Reputation: 2210Reputation: 2210Reputation: 2210Reputation: 2210Reputation: 2210Reputation: 2210Reputation: 2210Reputation: 2210Reputation: 2210
Quote:
Originally Posted by asteroid4u View Post
what about using NMAP tool? cant we detect port open status using NMAP ?
Again, nmap won't detect that the port is open unless something is listening on it.
Again, port 443 is for the secure http [https] server.
You will need to configure and run a secure web server to be able to have "external application" connect to it.
-or-
What JJJCR said:
Quote:
Run or turn off the power or simply cut all the cables with a bolt cutter.

Last edited by scasey; 07-06-2017 at 09:57 PM.
 
Old 07-06-2017, 09:56 PM   #9
JJJCR
Senior Member
 
Registered: Apr 2010
Posts: 2,148

Rep: Reputation: 448Reputation: 448Reputation: 448Reputation: 448Reputation: 448
Wink

Quote:
Originally Posted by asteroid4u View Post
Thanks a lot for all your Info's

what about using NMAP tool? cant we detect port open status using NMAP ?
Okay what's your Public IP we will do it for you? hahaha

Nmap can detect of course as long as everything is setup properly.

If everything is not setup properly no any tool in this planet earth, can tell whether that port is open or not.

Here's an exercise, use any tool you want and check whether Port 80 is open or not, if it is open then check 443, if it is not open try accessing: https://www.duckduckgo.com

Check whether you can access or not.

BTW, your setup is something like this:

Linux BOX <---> Router <---> ISP / External Network

Or there is something in between the router?

Last edited by JJJCR; 07-06-2017 at 10:37 PM. Reason: edit
 
  


Reply

Tags
linux


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
[SOLVED] Redirect port 443 requests to port 3000 on hostmonster (Centos 6.8) for Node Express Application listening on port 3000 brentw Linux - Server 8 12-20-2016 11:38 AM
[SOLVED] Making request at port 443, but strangely my requests are redirected to port 80. anjo236 Linux - Newbie 3 03-01-2016 01:16 PM
[SOLVED] Port 443 - HTTPS is Open cwizardone Slackware 2 07-13-2013 02:13 PM
Configuring Automatic Redirects from port 80 to port 443 with bundled Apache server kaplan71 Fedora 1 12-28-2007 08:30 AM
How To Open Port 443 On RedHat 7.1 sc300t Linux - General 4 02-07-2002 09:40 AM

LinuxQuestions.org > Forums > Linux Forums > Linux - Server

All times are GMT -5. The time now is 02:02 PM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Open Source Consulting | Domain Registration