On Thursday 29 May 2003 11:43, Ismet wrote: > Dear Admin, > > saya punya Webserver dengan bebrapa port setelah saya > probing hasilnya ada sbb: > ########### > (The 1527 ports scanned but not shown below are in > state: closed) > Port State Service > 1/tcp open tcpmux > 11/tcp open systat > 15/tcp open netstat > 21/tcp open ftp > 22/tcp open ssh > 53/tcp open domain > 79/tcp open finger > 80/tcp open http > 111/tcp open sunrpc > 119/tcp open nntp > 143/tcp open imap2 > 540/tcp open uucp > 635/tcp open unknown > 1080/tcp open socks > 1524/tcp open ingreslock > 2000/tcp open callbook > 3306/tcp open mysql > 6667/tcp open irc > 12345/tcp open NetBus > 12346/tcp open NetBus > 27665/tcp open Trinoo_Master > 31337/tcp open Elite > 32771/tcp open sometimes-rpc5 > 32772/tcp open sometimes-rpc7 > 32773/tcp open sometimes-rpc9 > 32774/tcp open sometimes-rpc11 > 54320/tcp open bo2k > ########## > > pertanyaan adalah, port apa kira kira yang vulnarable > dan harus ditutup selain 80,21,22 mysql, domain, > suapya webserver tersebut paling tidak cukup aman? > > mohon informasinya
Nggak ada yang perlu ditutup jika Anda hanya ingin membuka layanan ftp, ssh, domain (DNS), http, dan mysql. Port selain layanan yang anda buka, dibuka ama portsentry (dengan option -tcp). Iwan Setiawan --------------------------------------------------------------------- To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
