Solved

Firewall Help - List of Ports I should close.

Posted on 2004-10-12
4
147 Views
Last Modified: 2013-11-16
Can anyone tell me if a list of firewall ports that you should always close ?  My ports are currently marked as stelth which I assume is not the same thing.
0
Comment
Question by:Northumberland
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 2
4 Comments
 
LVL 71

Accepted Solution

by:
Chris Dent earned 500 total points
ID: 12285410

Stealth is better than Closed - it won't even admit the port exists that way.

Still, it is better to Stealth or Close everything inbound unless you specifically need it open.
0
 
LVL 1

Expert Comment

by:WanMan
ID: 12285674
What Chris said.

I would set the firewall to stop ALL ports by default and then only open up the ports you need.

Under normal circumstances, unless you are hosting services inside your firewall then you don't need to allow ANY traffic inbound, except in response to a request from inside.
0
 
LVL 11

Expert Comment

by:PennGwyn
ID: 12288093
Both correct.  Trying to "block all bad ports" is an unrewarding lifetime career.  The only sane approach is to block everything by default, and then open the things you actually need.

0
 
LVL 1

Expert Comment

by:WanMan
ID: 12296727
" Trying to "block all bad ports" is an unrewarding lifetime career. "  What a good way of putting it! May I quote you (anonymously)?
0

Featured Post

What, When and Where - Security Threats from Q1

Join Corey Nachreiner, CTO, and Marc Laliberte, Information Security Threat Analyst, on July 26th as they explore their key findings from the first quarter of 2017.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Most of the applications these days are on Cloud. Cloud is ubiquitous with many service providers in the market. Since it has many benefits such as cost reduction, software updates, remote access, disaster recovery and much more.
This article will inform Clients about common and important expectations from the freelancers (Experts) who are looking at your Gig.
There's a multitude of different network monitoring solutions out there, and you're probably wondering what makes NetCrunch so special. It's completely agentless, but does let you create an agent, if you desire. It offers powerful scalability …
Michael from AdRem Software outlines event notifications and Automatic Corrective Actions in network monitoring. Automatic Corrective Actions are scripts, which can automatically run upon discovery of a certain undesirable condition in your network.…
Suggested Courses

632 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question