Michel, thanks for your help. A few questions, if you can steer me in the right direction.
If my port is in the Nessus services file, is this there any way to edit the Nessus services file to remove it? Where is the file? Is this the C:\Program Files\Tenable\Nessus\services\services.db file? I'm pretty much stuck with a Windows server for this, so I can't upgrade to Nessus 3.1.x, I don't believe (there wasn't a download for it on the site). Is there any way to edit the nessusd.rules in Windows (assuming my port is on that list)? A search on my server did not find that file. Basically, is there any way to do this on a Windows installation? Thanks so much for your help. --Joe -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Michel Arboi Sent: Tuesday, March 11, 2008 3:35 PM To: [email protected] Subject: Re: How best to exclude 1 specific port (and associated plugins) On Tue, 11 Mar 2008 17:18:33 -0500 "Joseph Dimino" <[EMAIL PROTECTED]> wrote: > But from what I understand, the 'default' setting isn't just 1-65535. > It is 1-1024, plus all of the ports in services.txt file located under > Program Files\Tenable\Nessus\Services\, correct? No. default is just the content of Nessus services file. > So say I want to exclude port 5000. Add reject 0.0.0.0/0:5000 to nessusd.rules (available only in 3.1.x IIRC) -- http://www.bigfoot.com/~arboi http://ma75.blogspot.com/ PGP key ID : 0x0BBABA91 - 0x1320924F0BBABA91 Fingerprint: 1048 B09B EEAF 20AA F645 2E1A 1320 924F 0BBA BA91 _______________________________________________ Nessus mailing list [email protected] http://mail.nessus.org/mailman/listinfo/nessus This message and the information contained herein is proprietary and confidential and subject to the Amdocs policy statement, you may review at http://www.amdocs.com/email_disclaimer.asp _______________________________________________ Nessus mailing list [email protected] http://mail.nessus.org/mailman/listinfo/nessus
