Want to protect your cyber security and still get fast solutions? Ask a secure question today.Go Premium

x
  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 245
  • Last Modified:

How to check the below rules applied in my firewall?

-A INPUT -i eth1 -p tcp --destination-port 25 -j REJECT
-A INPUT -i eth1 -p tcp --destination-port 5432 -j REJECT
-A INPUT -i eth1 -p tcp --destination-port 22 -j ACCEPT
-A INPUT -i eth1 -p tcp --destination-port 80 -j ACCEPT
-A INPUT -i eth1 -p tcp --destination-port 443 -j ACCEPT
-A OUTPUT -i eth1 -p tcp --destination-port 25 -j ACCEPT

It shouldn't let to expose 25 and 5432 through the firewall.
 unblock ports 22 for ssh, 80 for http and 443 for https.
25 should be kept open for outgoing traffic only
0
jaisonshereen
Asked:
jaisonshereen
  • 6
  • 6
3 Solutions
 
MicheleMarconCommented:
0
 
jaisonshereenAuthor Commented:
I am getting this output:      


    * It appears that your IP address, 203.145.173.2, is listed in the Spamhaus Exploits Block List which is a list of IP addresses of hijacked PC's infected by illegal 3rd party exploits, open proxies (HTTP, socks, AnalogX, wingate, etc), worms/viruses with built-in spam engines, and other types of trojan-horse exploits.
    * Until your IP address has been removed your IP address will not be able to use this service.
    * Please please be sure to get your IP address removed from the Spamhaus Exploits Block List before using this service again.
0
 
MicheleMarconCommented:
http://www.spamhaus.org/xbl/

input your IP address on the box on the left side.
0
Who's Defending Your Organization from Threats?

Protecting against advanced threats requires an IT dream team – a well-oiled machine of people and solutions working together to defend your organization. Download our resource kit today to learn more about the tools you need to build you IT Dream Team!

 
jaisonshereenAuthor Commented:
IP Address Lookup

            74.XX.XX.71+ is not a valid IP address.



If the IP you are checking is not in our database, but you are receiving bounce messages saying it is, then it is probable the IP has been removed from our database but DNS servers around the internet have not yet updated. In this case, wait 1-2 hours and the blocking should clear by itself.

This lookup tool is for manual (non-automated) lookups only. Any perceived use of automated tools to access this system will result in firewalling or other countermeasures.
0
 
MicheleMarconCommented:
203.145.173.2 is your IP address.
0
 
jaisonshereenAuthor Commented:
no
0
 
MicheleMarconCommented:
Anyway 74.XX.XX.71 is not an IP Addess.

There should be some numbers instead of XX
0
 
jaisonshereenAuthor Commented:
i cannot provide it ..because its confidential
0
 
MicheleMarconCommented:
You don't need to tell it to me, you need to insert it on the spamhaus website.

If you do this way your IP will be removed from the block list and finally you will be able to use the port scanner on the first post.
0
 
jaisonshereenAuthor Commented:
that result i shown u above!
0
 
jaisonshereenAuthor Commented:
and i donno y it is showing like this ....203.145.173.2
actully i put the original ip and its showing some different ip as above
0
 
MicheleMarconCommented:
OK, then try with this software:

http://www.cafeaulait.org/course/week12/16.html
0

Featured Post

Evaluating UTMs? Here's what you need to know!

Evaluating a UTM appliance and vendor can prove to be an overwhelming exercise.  How can you make sure that you're getting the security that your organization needs without breaking the bank? Check out our UTM Buyer's Guide for more information on what you should be looking for!

  • 6
  • 6
Tackle projects and never again get stuck behind a technical roadblock.
Join Now