Part of Michel's message referred to a services.txt file -- I went to 
look, I have a copy in the same folder as services.db (C:\Program 
Files\Tenable\Nessus\services\) on a Windows installation of Nessus.  It's 
a plain text file, you should be able to edit out any port you don't want, 
and save it.

Port 5000 is listed.






"Joseph Dimino" <[EMAIL PROTECTED]> 
Sent by: [EMAIL PROTECTED]
03/11/2008 03:51 PM

To
<[email protected]>
cc

Subject
RE: How best to exclude 1 specific port (and associated plugins)







Michel, thanks for your help.

A few questions, if you can steer me in the right direction.

If my port is in the Nessus services file, is this there any way to edit
the Nessus services file to remove it?

Where is the file? Is this the C:\Program
Files\Tenable\Nessus\services\services.db file?

I'm pretty much stuck with a Windows server for this, so I can't upgrade
to Nessus 3.1.x, I don't believe (there wasn't a download for it on the
site).

Is there any way to edit the nessusd.rules in Windows (assuming my port
is on that list)? A search on my server did not find that file.

Basically, is there any way to do this on a Windows installation?

Thanks so much for your help.

--Joe



-----Original Message-----
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Michel Arboi
Sent: Tuesday, March 11, 2008 3:35 PM
To: [email protected]
Subject: Re: How best to exclude 1 specific port (and associated
plugins)

On Tue, 11 Mar 2008 17:18:33 -0500
"Joseph Dimino" <[EMAIL PROTECTED]> wrote:

> But from what I understand, the 'default' setting isn't just 1-65535.
> It is 1-1024, plus all of the ports in services.txt file located under
> Program Files\Tenable\Nessus\Services\, correct?

No. default is just the content of Nessus services file.

> So say I want to exclude port 5000.

Add   reject 0.0.0.0/0:5000  to nessusd.rules
(available only in 3.1.x IIRC)

--
http://www.bigfoot.com/~arboi                            
http://ma75.blogspot.com/
PGP key ID : 0x0BBABA91 - 0x1320924F0BBABA91
Fingerprint: 1048 B09B EEAF 20AA F645  2E1A 1320 924F 0BBA BA91
_______________________________________________
Nessus mailing list
[email protected]
http://mail.nessus.org/mailman/listinfo/nessus

This message and the information contained herein is proprietary and 
confidential and subject to the Amdocs policy statement,
you may review at http://www.amdocs.com/email_disclaimer.asp
_______________________________________________
Nessus mailing list
[email protected]
http://mail.nessus.org/mailman/listinfo/nessus

<<image/gif>>

_______________________________________________
Nessus mailing list
[email protected]
http://mail.nessus.org/mailman/listinfo/nessus

Reply via email to