I have used a tool called Net Tools to scan ports on my various servers to determine ports are open in the firewall through my host.
For around a decade, this tool has been accurate to determine what ports are open/closed.
I have used this tool to accurately find issues with the firewall with current host (dedicated server). The network admin says that net tools should not be trusted and even though the software claims the ports are open, they are not open.
I explained that less than a month ago, this software reflected that these ports should closed were reflected accurately as closed by scanning the ports.
Partial results:
Code:
Address Scanned: xx.xx.xx.xx
Scan Started at 10/27/2007 2:08:00 PM
Scan Finished at 10/27/2007 2:18:03 PM
Ports Scanned: 1 To 4000
Total Ports Found Open: 3794
Current Ports Found Open:
Port: 00004
Port: 00005
Port: 00009
Port: 00026
Port: 00044
Port: 00076
Port: 00083
Port: 00088
...
What are the ABSOLUTE best tools/ways that I can confirm that the ports are truly not accessible?
I have just installed APF and it seems to be running great.
I then installed NMAP and did a "nmap -sT -O localhost" but this lists lots of ports that I have shut down in APF and I am thinking it is testing the open ports before the firewall because the list of open ports is the same if the firewall is disabled or running.
Am I doing somthing wrong? Is there another way to test which ports I have open with APF running?
Our new data center provided us with a Cisco ASA5510 firewall. We're setting up all new servers and will begin migrating all of our domains from our current co-lo to the new place.
At the old co-lo, they provided us a very basic BSD based router, and our servers all had external public facing IPs on them. Firewalling was handled at the server (Windows Firewall or Linux IPtables).
The new place is NAT'ing us, so our servers all have a 192.168.10.x address inside, and they map the external address for us through to the inside.
By default, they are locking everything down. I had to ask them to open ssh so I could remote into my CentOS box last night.
I'm not a network guru-- what ports are going to NEED to be opened so I can give them a list? This is a standard PLESK hosting server so http (80), https, ssh, ftp, pop3, smtp, what else? Anyone have a list?
Can anyone recommend a hosting provider (No GoDaddy please) that provides me outbound access to port 3306 and 1221 and is reasonably priced?
I understand that many hosting providers who provide dedicated or virtual servers can give me this option but I only have one website that needs these specifications and that's not worth $60 a month.
I am currently in the throws of configuring a new dedicated "Windows Web Server 2008 / IIS7 / Plesk" server. As part of the setup I have obviously made sure the firewall is correctly setup. After doing this I have run a remote port scan (from my internet connected PC) to the IP address of the server. This has brought up two ports that should be blocked:
5190 1863
I can open a remote telnet session to both these ports, however if I remote desktop to the server and attempt a telnet connection both ports fail to respond.
Does anybody know what these ports are?
If it helps at all, the firewall surrounding the server is an external Cisco device
unable to send mail prabhu.miracle@itemaindia.com to miracle@itemaspinningindia.com itemaindiaspinningindia.com rejecting mails from itemaindia.com, how to solve this, pls help me friends
----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- ----- The following addresses had permanent fatal errors ----- <miracle@itemaspinningindia.com> (reason: 550-Verification failed for <prabhu.miracle@itemaindia.com>)
----- Transcript of session follows ----- ... while talking to itemaspinningindia.com.: >>> DATA <<< 550-Verification failed for <prabhu.miracle@itemaindia.com> <<< 550-No Such User Here <<< 550 Sender verify failed 550 5.1.1 <miracle@itemaspinningindia.com>... User unknown <<< 503-All RCPT commands were rejected with this error: <<< 503-Sender verify failed <<< 503 Valid RCPT command must precede DATA -----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------
I bought a hosting service from hostgator and received an email from them that I need to verify my account by calling them. I called them 7 times and they just kept saying "hello" and said they cannot hear me and hang up whereas I was able to hear them clearly. I have checked my phone by calling some friends in US and they are able to hear me clearly.
When I searched on google, I came to this forum where somebody has made a similar thread and wrote beware of hostgator. I am really confused after reading that thread. He said his website was available for 10 minutes whereas I didn't even receive my account details from them. I mean the server wasn't setup. I received a welcome email that said the server would be setup in 48 hours & within 7-8 hours, i received an email asking me to verify my account.
What should I do now? I don't even know if they have charged my CC as I can't check my CC statement till 20th.
My company ordered server on 23/10/2009 from LimeStone, and they asked for verification hence i given them all the ID that they need. After that, they told me they couldn't accept AMEX and have to pay through PayPal, i have paid since and NOW again they asked for ID again.
Why i have to verify for second time since i have posted all my ID and utility bill for first time? I don't think i need to give so much verification since PayPal has already verified my account as i owned PayPal Verified Business Account, this kind of "repeating" or double verification never happen when i order from ThePlanet/EV1 where i am looking to migrate to Limestone Networks.
This is very unpleasant experience and I don't want to wait for more than a week to get a server.
I'm trying to install HyperVM (I know, it isn't great, but need something quick) but need to unblock ports 8888 and 8887. I have no idea on how to do this via SSH. I've looked on Google, but nothing.
If you have a suggestion for another VPS panel which you think is much better than HyperVM and is free, please let me know. I might aswell install that then.
I have my server set up with the smtp daemon running on port 125, and assp listening on ports 25 and 26, and forwarding to port 125 if the mail passes. This setup has been working for months and months. Already today I've received several emails.
I just attempted to send an email, however, and thunderbird could not connect to port 26. (I use an alternate port because my ISP blocks port 25 except to their mail servers)
So I thought that assp had stopped running. Attempted to go to myip:55555, but the page would not load. Now I really thought assp was broken. SSH'd into server and was able to telnet to localhost, port 26 without an issue. Was also able to lynx [url] without an issue.
Since I'm able to log in to all of these weird ports via SSH but not from my local computer, I'm apt to think that they are blocking the ports (for some reason).
Is there any way I can test this theory? Nothing has changed on my side firewall-wise, and the poor girl at the ISP company didn't even know what a port was. I would like to be 100% sure before I give them another call demanding to speak to someone higher up...
I've installed Darwin Streaming Server on a brand new server (vps). But, what do you know, the RTSP and MP3 streaming TCP ports are not defined in the etc/services file of the server.
Is this normal? Should I have an issue with the service provider?
I'm behind the firewall on a public computer and all online port scan tests I've tried show that ALL ports on a computer I'm using are closed. Is this possible? I've been previously succesfully uploaded some files through cpanelproxy.net to get access to my site, for which opened port 80 was needed.
I'd like to know how I can use DNS to do something like make a CNAME record that points the same address to different addresses based on the port used.
mail.example.org on port 80 points to ghs.google.com mail.example.org on port 995 points to pop.gmail.com mail.example.org on port 587 poitns to smtp.gmail.com
Do SMTP servers by default use port 25 for receiving mail from another SMTP server? Are there any other receiving ports an SMTP server would be listening on by default?
My question is, a server I will be setting up is going to be behind a firewall that blocks outgoing connections *to* port 25. Is there going to be any way around this that is workable besides opening the port?
