How SECURE is your FIREWALL?
#1
Many of US have broadband internet. I read a few weeks ago it takes only 3 minutes for an unprotected computer system to be hacked.
This has motivated to make sure my internet firewalls are working.
I use "Shields Up" web site to test my firewall. The test is accomplished by probing your computer's network.
If you want to test your firewall goto Shields Up
Some of you already have 'hardened' your PC's against attacks. It might be worth a try to make sure port 113 doesn't show up during the test. My 'old' broadband router didn't have a block for port 113. My solution was to forward port 113 to a IP address that didn't exist in my network. As an example; forwarding port 113 to 192.168.1.254. I don't have any network devices that have 192.168.1.254. As a result the forwarding packet drops off the planet (aka bit bucket).
This has motivated to make sure my internet firewalls are working.
I use "Shields Up" web site to test my firewall. The test is accomplished by probing your computer's network.
If you want to test your firewall goto Shields Up
Some of you already have 'hardened' your PC's against attacks. It might be worth a try to make sure port 113 doesn't show up during the test. My 'old' broadband router didn't have a block for port 113. My solution was to forward port 113 to a IP address that didn't exist in my network. As an example; forwarding port 113 to 192.168.1.254. I don't have any network devices that have 192.168.1.254. As a result the forwarding packet drops off the planet (aka bit bucket).
#3
I love Steve Gibson... I've been watching what he does since about 1984.
Knocking out 113 is a good idea, but like he says on the site, remember that you did it if you ever run into a POP server that doesn't want to talk to you.
Knocking out 113 is a good idea, but like he says on the site, remember that you did it if you ever run into a POP server that doesn't want to talk to you.
Trending Topics
#8
Originally Posted by amusement
Like MVCrash said It's for a webserver (http). Please check your router port forwarding for port 80.
#9
Originally Posted by GRNTACO
I don't have a webserver running. How do you trun it off? I was checking my router and didn't see a port 80.

If you can't ID the application that's got it open on your machine, then head back into the router and look into "port mapping" or "static routes" or "port forwarding". The router will offer up one or more of these things... You'll want to setup something so that requests for port 80 get sent off to an unused IP address like 192.168.1.254, or change port 80 requests to an unused number like 8377.
As it is now, there's something live somewhere that's responding to requests, and that's not safe.
Now, a side issue here could be that you enabled remote administration on the router itself. It may be coming up on port 80, and that's REALLY bad.
If you want me to play, send me the IP address of the _router_ in email. But actually, you should be able to see it with a browser. Just enter the IP address into the URL line (i.e., "http://xxx.xxx.xxx.xxx") and see what comes up.
#10
Originally Posted by midiwall
Something is responding to request for service on the normal web port... Lemme have your IP address and I'll take a look. 
If you can't ID the application that's got it open on your machine, then head back into the router and look into "port mapping" or "static routes" or "port forwarding". The router will offer up one or more of these things... You'll want to setup something so that requests for port 80 get sent off to an unused IP address like 192.168.1.254, or change port 80 requests to an unused number like 8377.
As it is now, there's something live somewhere that's responding to requests, and that's not safe.
Now, a side issue here could be that you enabled remote administration on the router itself. It may be coming up on port 80, and that's REALLY bad.
If you want me to play, send me the IP address of the _router_ in email. But actually, you should be able to see it with a browser. Just enter the IP address into the URL line (i.e., "http://xxx.xxx.xxx.xxx") and see what comes up.

If you can't ID the application that's got it open on your machine, then head back into the router and look into "port mapping" or "static routes" or "port forwarding". The router will offer up one or more of these things... You'll want to setup something so that requests for port 80 get sent off to an unused IP address like 192.168.1.254, or change port 80 requests to an unused number like 8377.
As it is now, there's something live somewhere that's responding to requests, and that's not safe.
Now, a side issue here could be that you enabled remote administration on the router itself. It may be coming up on port 80, and that's REALLY bad.
If you want me to play, send me the IP address of the _router_ in email. But actually, you should be able to see it with a browser. Just enter the IP address into the URL line (i.e., "http://xxx.xxx.xxx.xxx") and see what comes up.
I think it may be the XP Pro and the remote desktop thingy.
#11
Originally Posted by GRNTACO
I think it may be the XP Pro and the remote desktop thingy.
#15
Originally Posted by GRNTACO
I can't access my router form work.
Originally Posted by SolidDigital
port 515, Name:printer Purpose:spooler
funny story... I was wandering through my router logs one time and found all these "port peeks" coming from an IP address. Using APNIC, I reversed the IP and found that it was coming from an address somewhere in Russia. I figured eye-for-an-eye is a good thing...
So I snooped on his IP for a while... and found an open share to a printer.
I connected to it... and started printing... VOLUMES of technical manuals I have laying around. Every-so-often I'd get an "Paper out" notice... So I'd wait a bit, the paper-out would clear... and I'd start printing again.

I kept that up for a couple of days... he finally got tired of the game and turned the printer off.
#16
that's pretty good lol, guess he learned his lesson =p
I do have a wireless router, but have never been able to connect to the other computer. it's running on windows 98 and this one's on xp. It would come in handy to figure out how to print something from this computer on the printer downstairs though lol.
I do have a wireless router, but have never been able to connect to the other computer. it's running on windows 98 and this one's on xp. It would come in handy to figure out how to print something from this computer on the printer downstairs though lol.
#17
Originally Posted by midiwall
If you've been using Remote Desktop, then log in there and hit up 192.168.1.1 (or whatever the router address is) from the point of view of the local machine. I do that from work sometimes.
#19
Co-Founder/Administrator
iTrader: (1)
Joined: May 2002
Posts: 32,242
Likes: 21
From: Auburn, Washington
I use that site from time to time.
Tested it earlier in the week with my Netgear RP614 NAT router, and I was stealth in everthing and showed no open ways to get in to my PC.
Now going to test it with the Linksys RT31p2 router I just hooked up.
Stand by...
Cool, all ports on the big test where it tests the first 1056 ports are all in stealth mode.
Tested it earlier in the week with my Netgear RP614 NAT router, and I was stealth in everthing and showed no open ways to get in to my PC.
Now going to test it with the Linksys RT31p2 router I just hooked up.
Stand by...
Cool, all ports on the big test where it tests the first 1056 ports are all in stealth mode.



I get the open port on both machines.