On Mon, May 24, 2004 at 10:51:58AM -0700, k winter wrote:

> 1) can someone make connection to my PC thru port
> 1241?

By default, nessusd will listen on all interfaces available to the
machine so yes, there's a good chance someone else can try to connect to
nessusd on your host. 

> 2) how can i secure the nessusd?

o Have nessusd listen on specific interfaces using the '-a' 
  commandline option when you start it.

o Compile nessus-core with support for tcp_wrappers and use that
  to control access.

o Compile nessus-core to support unix sockets rather than Internet
  sockets.  This will mean only local clients can connect.

o Adjust your firewall rules to limit access.

> 3) what can i do so that port 1241 won't show up in
> the  
>    portscan result?

If you're scanning the localhost, there's not much.  But then, why
would you worry about it?

George
-- 
[EMAIL PROTECTED]

Attachment: pgpSt3pQuQBUI.pgp
Description: PGP signature

_______________________________________________
Nessus mailing list
[EMAIL PROTECTED]
http://mail.nessus.org/mailman/listinfo/nessus

Reply via email to