Skip to Content.
Sympa Menu

baslinux - Re: [BL] nmap and security

baslinux AT lists.ibiblio.org

Subject: Baslinux mailing list

List archive

Chronological Thread  
  • From: sindi keesan <keesan AT sdf.lonestar.org>
  • To: baslinux AT lists.ibiblio.org
  • Subject: Re: [BL] nmap and security
  • Date: Sun, 28 Jan 2007 20:30:04 +0000 (UTC)

On Sun, 28 Jan 2007, Karolis Lyvens wrote:

On Sun, Jan 28, 2007 at 05:06:14PM +0000, sindi keesan wrote:
This site used nmap 3.0 to probe my local IP number (which is also at the
end of a file /var/*/pppd.tbd as IPLOCAL) but appears to have checked out
all the ports at my ISP. There was mention of the closest large city.
758 are closed and it listed the others starting with systat and netstat.

Then I guess that you have an internal IP. I.E., you're behind Network
Address Translating router, which masks your internal IP. Because
the external IP which is seen by external hosts from the Internet is
shared with many hosts at your ISP, it might be hard to connect to your
computer from outside (when connecting/port scanning your external IP,
you'll connect/port-scan ISP's router instead of your box).

This is speculation, since I don't know your exact ISP setup.


I was connected via earthlink, if that helps.


I could not interpret the results.

You could copy+paste them here

About 900 lines of text? (I am guessing, for that many ports).

The other tests were for scanning various servers.

They might be useful if you are trying to test whether your
telnet/ftp/ssh/smtp/etc server is accesible from outside

I don't have any servers running.

This discussion reminds me of being told to never wear a used bike helmet
because it might have microscopic cracks. We have the old Bell style,
with a thick heavy white plastic shell instead of a decorative colored
nylon or thin plastic layer, that would hold the styrofoam together even
if it did crack. It might not be possible to crack BL if you don't remove
the plastic coating of not running servers other than X.

Probably. Trying to crack BL from outside is a bit like trying to crack
a DOS box from internet (doesn't run any services by default, isn't
connected all the time, etc).

Neither is my linux box.

It may be possible to exploit client-side security flaws/holes (like
bugs in Opera or pmail), but that requires:
1. A malicious server that one has to connect to (voluntarily)

A URL? Am I safe ssh'ing to sdf as root?

2. That server must have an exploit suitable for the client and specific
client's version
3. If it actually *succeeds* exploiting the client, then, it must deal
with hostile, inhospitable and nonstandard enviroment :) (nonstandard
libraries, lack of many usual ones, absence of most usual utilities,
Busybox, ash, uClibc, and, finally, 2.2 kernel)

2.4 kernel in my case, and anyone else needing USB storage or programs that won't work with 2.2.

Sounds like a human virus trying to attack a dinosaur.

Karolis





Archive powered by MHonArc 2.6.24.

Top of Page