homepage Welcome to WebmasterWorld Guest from 54.163.91.250
register, free tools, login, search, pro membership, help, library, announcements, recent posts, open posts,
Become a Pro Member

Home / Forums Index / Hardware and OS Related Technologies / Linux, Unix, and *nix like Operating Systems
Forum Library, Charter, Moderators: bakedjake

Linux, Unix, and *nix like Operating Systems Forum

    
my ISP detect some port using by virus
can u help me about blocking some port
badm4n




msg:910425
 4:56 am on Jul 21, 2004 (gmt 0)

my isp contact me yesterday and askin' to me to BLOCK port 445 and 135 cause they said virus using that port

how to block this port using iptables? and how to make this blocking available on next reboot

sory i am new

info :
OS : SUSE 9

thx

 

nobody




msg:910426
 8:41 am on Jul 21, 2004 (gmt 0)

There is a general How-to on using Linux Firewalling tools here :

[tldp.org...]

(as well as lots of other places on the net).

If you don't need a service running, or port open, then close it :)

encyclo




msg:910427
 10:01 am on Jul 21, 2004 (gmt 0)

Welcome to WebmasterWorld, badm4n.

Port 135 is for the Microsoft Remote Procedure Call (RPC) service and port 445 is for SMB. Are you running an open Samba share? In both cases, because you are running Linux, your machine is not vulnerable to the worms which attack these ports, but your ISP may have detected that your machine is responding on the two ports in question. As already mentioned, you need to ask yourself whether you need these services running - if you need Samba for networking to local Windows machines on your network, then you should secure it.

My recommendation over IPTables is to get an external router with NAT translation and an integrated firewall. They are incredibly cheap these days, and they protect the whole network with one device.

m_shroom




msg:910428
 3:29 pm on Jul 21, 2004 (gmt 0)

info :
OS : SUSE 9
Go to System => Yast2 => Security and Users => Firewall

Activate, select external interface, use default settings

badm4n




msg:910429
 3:19 pm on Jul 23, 2004 (gmt 0)

thx for your help guys...

i think i dont use that samba things ^^

i refer to block it for future convience between me and my ISP lolz

thanks for your help....

btw ....

i am new at *nix thing ...

do you have a url that explain and teach a newbies from zero ... about linux ... hmmmm i refer to use slackware for my future OS....
i need a URL that "teach" me about slackware ( installation and then setup :p ) pls pls pls

thanks

MattyMoose




msg:910430
 5:11 pm on Jul 23, 2004 (gmt 0)

I used to use slackware exclusively... This site helped me quite a lot. It comes as quite the shocker, I'm sure, but:

[slackware.com ]
[slackware.com ]

and for package management/updating use:

[swaret.org ]

I left the Linux world before swaret had come out, so I've never used it, but apparently it's a life-saver.

And, for an all-in-one Gnome setup:

[dropline.net ]

HTH,
MM

Global Options:
 top home search open messages active posts  
 

Home / Forums Index / Hardware and OS Related Technologies / Linux, Unix, and *nix like Operating Systems
rss feed

All trademarks and copyrights held by respective owners. Member comments are owned by the poster.
Home ¦ Free Tools ¦ Terms of Service ¦ Privacy Policy ¦ Report Problem ¦ About ¦ Library ¦ Newsletter
WebmasterWorld is a Developer Shed Community owned by Jim Boykin.
© Webmaster World 1996-2014 all rights reserved