Results 1 to 6 of 6

Thread: newbie firewall concerns port 68 open

  1. #1

    newbie firewall concerns port 68 open

    hi just got knoppix, and need a little help getting my firewall in to stealth mode on www.grc.com
    {its fine at sygate sos}
    but at gibson it shows port 68 is open and port 67 is closed and all the other ports are in stealth mode..

    i installed firestarter which didn't seem to do much so i then used this line

    /sbin/iptables -A INPUT -p tcp --syn -j DROP

    which put all but two ports in to stealth mode

    any advice on how to stealth these 2 ports ??


    cheers

    /Knoppix/Knewbie/

  2. #2
    Senior Member registered user
    Join Date
    Feb 2003
    Location
    Nova Scotia, Canada
    Posts
    2,479

    Re: newbie firewall concerns port 68 open

    Quote Originally Posted by /Knoppix/Knewbie/
    but at gibson it shows port 68 is open and port 67 is closed and all the other ports are in stealth mode..

    i installed firestarter which didn't seem to do much so i then used this line

    /sbin/iptables -A INPUT -p tcp --syn -j DROP

    which put all but two ports in to stealth mode

    any advice on how to stealth these 2 ports ??


    cheers

    /Knoppix/Knewbie/
    Try /sbin/iptables -A INPUT -p tcp --dport 68 -j DROP a good tutorial and sample script are here and there are a couple of other firewalls available such as Guarddog and Bastille-Linux in Debian.

  3. #3
    Senior Member registered user
    Join Date
    Nov 2002
    Location
    USA, IL
    Posts
    1,041

    Re: newbie firewall concerns port 68 open

    --Also try ' nmap localhost ' and ' less /etc/services ' to see which programs run on those ports. You can also use ' lsof |grep 68 ' to list open files/ports.

    --I'm concerned if you disable port 68 (bootpc) your DHCP server will stop working, but I don't know that much about DHCP or firewalling.

    (COMPLETE IPTABLES NEWBIE QUESTION) - After skimming thru the iptables tutorial and understanding about 2% of it, what about limiting your DROP rule to interface ppp0?

    Quote Originally Posted by Stephen
    Try /sbin/iptables -A INPUT -p tcp --dport 68 -j DROP a good tutorial and sample script are here and there are a couple of other firewalls available such as Guarddog and Bastille-Linux in Debian.

  4. #4
    i have tried going to the sites you reccommend but they seem not to be functioning/

    o well cheers for the advice anyway

    woody

  5. #5
    Senior Member registered user
    Join Date
    Feb 2003
    Location
    Nova Scotia, Canada
    Posts
    2,479
    Quote Originally Posted by /Knoppix/Knewbie/
    i have tried going to the sites you reccommend but they seem not to be functioning/

    o well cheers for the advice anyway

    woody
    Here is the Guarddog and Bastille-Linux web sites I just checked them and they both work from my machine another place you can try is Arno's Iptables which is what I use it's fairly easy to setup you only have to edit a couple of lines in the script(s) and change some permissions on the files and you are ready to use it.

  6. #6
    Senior Member registered user
    Join Date
    Feb 2003
    Location
    Nova Scotia, Canada
    Posts
    2,479

    Re: newbie firewall concerns port 68 open

    Quote Originally Posted by Dave_Bechtel
    (COMPLETE IPTABLES NEWBIE QUESTION) - After skimming thru the iptables tutorial and understanding about 2% of it, what about limiting your DROP rule to interface ppp0?

    Quote Originally Posted by Stephen
    Try /sbin/iptables -A INPUT -p tcp --dport 68 -j DROP a good tutorial and sample script are here and there are a couple of other firewalls available such as Guarddog and Bastille-Linux in Debian.
    Most firewalls that I have seen do that when you are setting up the rules you have your external (internet) connection which is what you would be dropping the incoming packets on you can still establish outgoing connections to get what you require from the external interface unless you go out of your way to block outgoing connections on the ports. If you have an internal interface that you are using NAT on to share the connection it is usually on a trusted internal interface so you can have access to your internal network. This is what I do with my firewall machine from the outside my computer does not exist on the internet if you scan it but on the internal side my firewall machine runs only SSH so I can get to it to check for upgrades to my Woody (actually Mini-Woody now known as Bonzai Linux) install on it and HTTP so I can serve myself some web pages that I have.

Similar Threads

  1. Two computers, one ip, one port.
    By hernan in forum Networking
    Replies: 9
    Last Post: 01-14-2005, 02:42 AM
  2. How to get a list of parrallel port and serial port?
    By kn2user in forum General Support
    Replies: 0
    Last Post: 12-06-2004, 06:43 PM
  3. ethernet port
    By ngtisu in forum Hardware & Booting
    Replies: 4
    Last Post: 09-27-2004, 03:13 PM
  4. Parallel Port always in use?
    By KeTZer in forum Hardware & Booting
    Replies: 0
    Last Post: 05-13-2004, 01:47 PM
  5. Port 80 Open
    By oscar in forum Networking
    Replies: 8
    Last Post: 05-07-2003, 03:12 AM

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •  


Dell PowerEdge R640 NVMe Server 2.10Ghz 8-Core 96GB 10x 1.6TB NVMe SSD HBA330 picture

Dell PowerEdge R640 NVMe Server 2.10Ghz 8-Core 96GB 10x 1.6TB NVMe SSD HBA330

$3133.65



DELL OPTIPLEX 3080 | INTEL CORE I5-10500 3.10GHZ | 500GB | 8GB RAM | NO OS picture

DELL OPTIPLEX 3080 | INTEL CORE I5-10500 3.10GHZ | 500GB | 8GB RAM | NO OS

$159.99



Apple iMac 24

Apple iMac 24" (256GB SSD, M1, 8GB, 8-Core GPU) Yellow - MGPF3LL/A - LOCKED

$450.00



Intel - Core i7-13700K 13th Gen 16 cores 8 P-cores + 8 E-cores 30M Cache, 3.4... picture

Intel - Core i7-13700K 13th Gen 16 cores 8 P-cores + 8 E-cores 30M Cache, 3.4...

$364.99



Intel - Core i9-13900K 13th Gen 24 cores 8 P-cores + 16 E-cores 36M Cache, 3 ... picture

Intel - Core i9-13900K 13th Gen 24 cores 8 P-cores + 16 E-cores 36M Cache, 3 ...

$519.99



Intel - Core i7-12700K Desktop Processor 12 (8P+4E) Cores up to 5.0 GHz Unloc... picture

Intel - Core i7-12700K Desktop Processor 12 (8P+4E) Cores up to 5.0 GHz Unloc...

$242.99



AMD Ryzen™ 7 5700X 8-Core, 16-Thread Unlocked Desktop Processor picture

AMD Ryzen™ 7 5700X 8-Core, 16-Thread Unlocked Desktop Processor

$163.00



Intel Xeon E5-2667 V2 LGA 2011 3.3GHz 8 Core 130W 25MB 8GT/s CPU Processor picture

Intel Xeon E5-2667 V2 LGA 2011 3.3GHz 8 Core 130W 25MB 8GT/s CPU Processor

$24.00



Dell Desktop Computer 16GB RAM 512GB SSD Intel Core i5 8th Gen. Windows 11 Pro picture

Dell Desktop Computer 16GB RAM 512GB SSD Intel Core i5 8th Gen. Windows 11 Pro

$250.00



Intel Core i9-13900K Raptor Lake 24-Core (8P+16E) Desktop Processor CPU picture

Intel Core i9-13900K Raptor Lake 24-Core (8P+16E) Desktop Processor CPU

$499.00