Andr� wrote:

> Is it ok to leave the following ports open?
> - 119      nntp
> - 1045      trojan
> - 1080      socks
> - 1524      ingreslock
> - 2000      callbook
> - 2005      deslogin
> - 3128      squid-http
> - 5742      trojan
> - 6000      X11
> - 6667      irc
> - 20034      trojan
> - 40421      trojan
>

It is good practice to lock down all services that are not specifically
required to run your business. You can snatch alsorts of information about a
system from it's open ports.
I have not used www.securityspace.com but I guess they have a database of
known trojan ports, here's one: http://www.simovits.com/nyheter9902.html.
For instance port 20034 is a known port for Netbus Pro 2,
http://www.davidm.8m.com/netbus.html . It is similar to Back Orifice and
runs on NT, if you're OS is not NT, it's probably a false alarm. If I were
you I would find out which applications are listening on what ports and then
decide whether you require them or not.

Adrian


-
[To unsubscribe, send mail to [EMAIL PROTECTED] with
"unsubscribe firewalls" in the body of the message.]

Reply via email to