Baslinux mailing list

["Samual Acorn" <sam.acorn AT gmail.com>]

On 27/01/07, sindi keesan <keesan AT sdf.lonestar.org> wrote:
> I found 101 pages of man for nmap.  The TAG people (who had various
> theories about lpr and root, and also suggested a printing script
> instead) keep telling me running as root is insecure and to check my
> ports.  nmap works in BL2 (nmapfe wants libc5 X).  It listed a lot of
> open ports at sdf.lonestar.org.  21 23 79 80 etc.  telnet ftp http?

er... cos i dont want you getting in trouble.. -please- ask before
scanning a system that doesnt belong to you... portscans are rather
frowned upon... most admins will see one and think an attack is not
too far behind... think of it as surveying the battlefeild before
starting the fight...

> nmap -v -A 127.0.0.1 said all 1663 ports are closed.

with no services (ftpd, httpd, telnetd, etc) running thats normal....
but as you found out X opens a port (6000) to the outside world when
running...

> How should I use nmap to check if my computer is vulnerable while online?
> If I don't run telnetd sshd etc is there any security risk?

you would need to probe it from another system over the net to see how
it acts... a good online portscanner is at www.grc.com ... click
'sheilds up' on the first page then click it again on the second...
(bad site design)... youll need to use opera for that site (lynx/links
wont work)

to check for security holes in the browser itself goto
http://bcheck.scanit.be/ ... youll need javascript turned on...


> keesan AT sdf.lonestar.org
> SDF Public Access UNIX System - http://sdf.lonestar.org


--
--
--sam
--
Web; http://mephitus.no-ip.org/
Skype; Mephitus
ICQ; 51687964
--
"When you've done something right, no one will be sure you've done
anything at all." -- Futurama
--