Arch Linux

jargoman

Member

Registered: 2008-03-10

Posts: 33

[Solved]can't open/close network ports

my hosts.deny file is

ALL: ALL: DENY

my hosts.allow file is empty (ie commented out). Furthermore I have installed firestarter and  it seems no matter what I do when I enter this nmap command

nmap -p 1-65535 192.168.254.7     

I get

Interesting ports on 192.168.254.7:
Not shown: 65532 closed ports
PORT    STATE SERVICE
22/tcp  open  ssh
111/tcp open  rpcbind
716/tcp open  unknown

the result this command...
nmap -p 1-65535 localhost

PORT     STATE SERVICE
22/tcp   open  ssh
111/tcp  open  rpcbind
716/tcp  open  unknown
8118/tcp open  privoxy
9050/tcp open  tor-socks
9051/tcp open  tor-control

So my assumption is that some ports are being blocked while others aren't. First off. What is port 716 used for and why is it open? Secondly why is anything open when my hosts.allow is empty. and why no matter what my policies are in firestarter it seems to make no difference to the above two commands. In fact I have only allowed privoxy in firestarter.

Basically it seems I have no control over my ports.

Last edited by jargoman (2009-10-26 02:19:54)

fijam

Member

Registered: 2009-02-03

Posts: 244

Website

Re: [Solved]can't open/close network ports

See if you can connect to any of those scanned ports.

If you want to have control over your ports either stop appropriate services (to see what's listening where use for example netstat -neelp) or use iptables.

Hope that helps.

Last edited by fijam (2009-10-21 19:04:41)

fukawi2

Ex-Administratorino

From: .vic.au

Registered: 2007-09-28

Posts: 6,224

Website

Re: [Solved]can't open/close network ports

First: host.allow and hosts.deny do not stop ports being opened. They only restrict access when a client connections, and only if the application that is accepting the connection supports tcp_wrappers.

Second: to really see what ports are open, use the command:

netstat -tnlp

Third: what is your firestarter configuration? Post the output of (as root):

iptables -nvL

---

Are you familiar with our Forum Rules, and How To Ask Questions The Smart Way?

BlueHackers // fscanary // resticctl

jargoman

Member

Registered: 2008-03-10

Posts: 33

Re: [Solved]can't open/close network ports

I'm going to mark this as solved. I tested my ports at this site. http://www.canyouseeme.org/

I can open and close the ports.  I just can't test my ports from the local machine otherwise it's inaccurate.