| View previous topic :: View next topic |
| Author |
Message |
li1_getoo
l33t
Joined: 20 Oct 2002
Posts: 661
Location: Queens , NY
|
 Posted: Sat Jan 11, 2003 10:37 pm Post subject: port open |
 |
|
| Code: | root # nmap -sU localhost
Starting nmap V. 3.10ALPHA6 ( www.insecure.org/nmap/ )
Interesting ports on localhost (127.0.0.1):
(The 1467 ports scanned but not shown below are in state: closed)
Port State Service
68/udp open dhcpclient
Nmap run completed -- 1 IP address (1 host up) scanned in 3.460 seconds
|
i do have iptables installed but i am a little scared of getting in to it. The same goes for the security page in Docs , but i dont wanna stop blocking stuff and have no clue what i'm doing
how do i stop it from listening to that port
thank u  |
|
| Back to top |
|
 |
garo
Bodhisattva
Joined: 15 Jul 2002
Posts: 860
Location: Edegem,BELGIUM
|
| Posted: Sat Jan 11, 2003 10:46 pm Post subject: |
|
|
kill your dhcpclient:
but i wouldn't do it if i where you,if you change anything on your networkcard,dhcp is necessary to get a ip-adress
_________________
My favorite links this month:
- Surf Random
- Web-based SSH
- Stop Spam
Last edited by garo on Sat Jan 11, 2003 11:12 pm; edited 1 time in total |
|
| Back to top |
|
|
li1_getoo
l33t
Joined: 20 Oct 2002
Posts: 661
Location: Queens , NY
|
| Posted: Sat Jan 11, 2003 10:55 pm Post subject: |
|
|
| i know that , so what is my best bet on masking this |
|
| Back to top |
|
|
garo
Bodhisattva
Joined: 15 Jul 2002
Posts: 860
Location: Edegem,BELGIUM
|
| Posted: Sat Jan 11, 2003 11:13 pm Post subject: |
|
|
configure your firewall so that it only allows traffic from the dhcp-server to your udp-port 68.
_________________
My favorite links this month:
- Surf Random
- Web-based SSH
- Stop Spam |
|
| Back to top |
|
|
li1_getoo
l33t
Joined: 20 Oct 2002
Posts: 661
Location: Queens , NY
|
| Posted: Sun Jan 12, 2003 12:56 am Post subject: |
|
|
| thank u sir |
|
| Back to top |
|
|
Sven Vermeulen
Retired Dev
Joined: 29 Aug 2002
Posts: 1345
Location: Mechelen, Belgium
|
| Posted: Mon Jan 13, 2003 5:35 pm Post subject: |
|
|
Do note that, if your internet provider (I assume the DHCP-server is of your internet provider) switches the IP of the DHCP-server to another IP (which can happen) your PC won't be able to go on the internet anymore. Also, if your provider's network is huge, it could be that it is using primary and secundary DHCP-servers in failover (meaning that, if one fails, another will take over). If the first one goes down, so will your internet connection.
Try getting to know what ip-range your internet provider uses for its own servers, and check if that one differs from the ip-range it gives its users. Then accept traffic from that range (providers', not users'), instead of just one ip. |
|
| Back to top |
|
|
li1_getoo
l33t
Joined: 20 Oct 2002
Posts: 661
Location: Queens , NY
|
| Posted: Tue Jan 14, 2003 3:51 am Post subject: |
|
|
| thanx the iprange makes sense |
|
| Back to top |
|
|
|
Networking & Security
