Forum: OT


Subject: Had to put up a Firewall

DarkMatter_ opened this issue on Jan 15, 2004 ยท 36 posts


igohigh posted Fri, 16 January 2004 at 12:21 AM

Attached Link: http://www.norton.com

Norton will now do a free online test for security holes for you. Of course they want you to buy their product but they do give fair reports, I use PC-cillin2004 and they gave me an 'All Green' thumbs up (just installed W2Kpro last night and just finished all my OS upgrades): **Port Check** ICMP Ping Ping. Ping is a network troubleshooting utility. It asks your computer to acknowledge its existence. If your computer responds positively to a ping, hackers are more likely to target your computer. "STEALTH" 21 FTP (File Transfer Protocol). FTP is used to transfer files between your computer and other computers. Port 21 should be open only if you're running an FTP server. "STEALTH" 22 SSH. TCP connections to this port might indicate a search for SSH, which has a few exploitable features. SSH is a secure replacement for Telnet. The most common uses of SSH are to securely login and copy files from a server. "STEALTH" 23 Telnet. Telnet can be used to log into your computer from a terminal anywhere in the world. This port should be open only if you're running a Telnet server. "STEALTH" 25 SMTP (Simple Mail Transfer Protocol). A protocol for host-to-host mail transport. This port should be open only if you're running a mail server. "STEALTH" 79 Finger. Finger is an Internet utility that allows someone to obtain information about you, including your full name, logon status, and other profile information. "STEALTH" 80 HTTP (Hypertext Transfer Protocol). HTTP is used to transfer Web pages over the Internet. Port 80 should be open only if you're running a Web server. "STEALTH" 110 POP3 (Post Office Protocol). Internet mail servers and mail filter applications use this port. This port should be open only if you're running a mail server. "STEALTH" 113 Ident / Authentication. This service is required by some mail, news, or relay chat servers to allow access. A stealth result on this port could cause performance problems. "STEALTH" 119 NNTP (Network News Transfer Protocol). A service used by News servers to distribute Usenet articles to newsreader applications and between other servers. "STEALTH" 135 Location service (loc-srv). This port is used to direct RPC (Remove Procedure Calls) services to the appropriate dynamically mapped ports. Hackers can use this to determine which port is used by several Windows services. This port should not be visible from the Internet. "STEALTH" 139 NetBIOS. NetBIOS is used for Windows File & Print sharing. If port 139 is open, your computer is open to sharing files over the Internet. Other components of NetBIOS can expose your computer name, workgroup, user name, and other information. To learn more about preventing connections to your NetBIOS ports, see: NetBIOS Information and Configuration Instructions "STEALTH" 143 IMAP (Internet Message Access Protocol). IMAP is a sophisticated protocol for electronic mail delivery. This port should be open only if you're running an IMAP server. "STEALTH" 443 HTTP over TLS/SSL. A protocol for providing secure HTTP communication. It should be open only if you're running a Web server. "STEALTH" 445 Windows NT / 2000 SMB. A standard used to exchange Server Message Blocks, and can be exploited in multiple ways, including gaining your passwords. "STEALTH" 1080 SOCKS. This protocol allows computers access to the Internet through a firewall. It is used when one IP address is shared among several computers. Generally this protocol only allows access out to the Internet. However, it is frequently configured incorrectly to allow hackers to pass traffic inwards through the firewall. "STEALTH" 1723 PPTP (Point-to-Point Tunneling Protocol). This service is used for virtual private networking connections. "STEALTH" 5000 UPnP (Universal Plug and Play). This service is used to communicate with any UPnP devices attached to your network. "STEALTH" 5631 pcAnywhere. This port is used by Symantec pcAnywhere when in host mode. "STEALTH" ---------------- **Windows Vulnerability Check** Description: Tests whether basic information, including your PC's network identity, can be seen by hackers. Analysis: Your computer's identity is secure. However, this does not mean you are completely safe from all Internet security threats. -------------- **Trojan Horse Check** Description: Attempts to test for access to your computer through methods commonly used by Trojan horses. Analysis: Your computer and data are not vulnerable to Trojan horse attacks. However, Trojan horse threats are constantly evolving, and unless you have a personal firewall and current virus protection, you're not completely safe. To learn more about threats you are protected against, view a detailed analysis of your test results. --------------------------- **Antivirus Product Check** Description: Checks for a current version of a commonly-used virus protection product. Analysis: Your computer is running virus protection software and you are at low risk to virus attacks. However, viruses are constantly evolving and you need to keep your virus protection current to stay safe. ------------------------