Re: is it rational to close the 139 port

2012-08-03 Thread Celejar
On Fri, 3 Aug 2012 19:26:56 +1200 Chris Bannister wrote: > On Wed, Aug 01, 2012 at 10:22:09AM -0400, Celejar wrote: > > There have been numerous well-publicized breaches at banks, major > > retailers, etc. (and doubtless even more unpublicized ones). If / when > > hackers get your credentials to

Re: is it rational to close the 139 port

2012-08-03 Thread Chris Bannister
On Wed, Aug 01, 2012 at 10:22:09AM -0400, Celejar wrote: > There have been numerous well-publicized breaches at banks, major > retailers, etc. (and doubtless even more unpublicized ones). If / when > hackers get your credentials to one institution, do you really want > them to have the keys to all

Re: [OT] secure passwords (was Re: is it rational to close the 139 port)

2012-08-01 Thread Andrei POPESCU
On Ma, 31 iul 12, 17:57:38, Bob Proulx wrote: > > The problem is how many of those can you keep straight in your head? > How many web sites and systems all need one of those unique passwords? > And you aren't reusing those passwords on multiple unrelated sites are > you? > > As with all things xk

Re: is it rational to close the 139 port

2012-08-01 Thread Celejar
On Tue, 31 Jul 2012 10:08:28 + Bonno Bloksma wrote: > Hi, > > >> Gibberish implies one wouldn't be able to remember the > >> password/phrase. > > > Which is why, as Bruce Schneir recommends, you _write it down_. > > Which is what I do. Whenever I need a new password I open my editor, > cl

Re: is it rational to close the 139 port

2012-08-01 Thread Celejar
On Tue, 31 Jul 2012 20:31:56 +1200 Chris Bannister wrote: > On Mon, Jul 30, 2012 at 06:15:26PM +0100, Brad Rogers wrote: > > On Mon, 30 Jul 2012 11:54:14 -0500 > > John Hasler wrote: > > > > Hello John, > > > > >Brad Rogers writes: > > >> Yeah, on a Post-It note. Stuck to the monitor. > > >

Re: [OT] secure passwords (was Re: is it rational to close the 139 port)

2012-07-31 Thread Glenn English
On Jul 31, 2012, at 9:00 PM, Bob Proulx wrote: > Fortunately for most of us there is the support group of family.They > know these things and would help me with them. I was 67 years old when it happened, and the family I have left is 1000 miles away. Fortunately, my sister flew here to take

Re: [OT] secure passwords (was Re: is it rational to close the 139 port)

2012-07-31 Thread Bob Proulx
Stan Hoeppner wrote: > Glenn English wrote: > > Dud'n work, guys. I fell off my bike a couple years ago and completely > > lost all my passwords. Rebuilding my servers (and laptops and iPads) was > > no fun at all. Write 'em down and put the paper in a safe-deposit box. > > If you can't remember

Re: [OT] secure passwords (was Re: is it rational to close the 139 port)

2012-07-31 Thread lina
On Wed, Aug 1, 2012 at 8:03 AM, Glenn English wrote: > > On Jul 31, 2012, at 4:57 PM, Stan Hoeppner wrote: > >> On 7/31/2012 10:51 AM, Mike McClain wrote: >> >>>If a password is any place but in your head I question its >>> security >> >> Agreed. > > Dud'n work, guys. I fell off my bike a coup

Re: [OT] secure passwords (was Re: is it rational to close the 139 port)

2012-07-31 Thread Stan Hoeppner
On 7/31/2012 7:03 PM, Glenn English wrote: > Dud'n work, guys. I fell off my bike a couple years ago and completely > lost all my passwords. Rebuilding my servers (and laptops and iPads) was > no fun at all. Write 'em down and put the paper in a safe-deposit box. If you can't remember the passw

Re: [OT] secure passwords (was Re: is it rational to close the 139 port)

2012-07-31 Thread lina
On Wed, Aug 1, 2012 at 6:57 AM, Stan Hoeppner wrote: > On 7/31/2012 10:51 AM, Mike McClain wrote: > >> If a password is any place but in your head I question its >> security > > Agreed. > >> Take a name and a number out of your childhood that you'll >> remember forever like your first pet

Re: [OT] secure passwords (was Re: is it rational to close the 139 port)

2012-07-31 Thread Glenn English
On Jul 31, 2012, at 4:57 PM, Stan Hoeppner wrote: > On 7/31/2012 10:51 AM, Mike McClain wrote: > >>If a password is any place but in your head I question its >> security > > Agreed. Dud'n work, guys. I fell off my bike a couple years ago and completely lost all my passwords. Rebuilding m

Re: [OT] secure passwords (was Re: is it rational to close the 139 port)

2012-07-31 Thread Bob Proulx
Mike McClain wrote: > If a password is any place but in your head I question its > security but here's a scheme for secure passwords that are not > subject to dictionary lookups and are easy to remember. > > Take a name and a number out of your childhood that you'll > remember forever lik

Re: [OT] secure passwords (was Re: is it rational to close the 139 port)

2012-07-31 Thread Stan Hoeppner
On 7/31/2012 10:51 AM, Mike McClain wrote: > If a password is any place but in your head I question its > security Agreed. > Take a name and a number out of your childhood that you'll > remember forever like your first pet and the first phone number > you memorized, scrambled together.

[OT] secure passwords (was Re: is it rational to close the 139 port)

2012-07-31 Thread Mike McClain
On Tue, Jul 31, 2012 at 08:31:56PM +1200, Chris Bannister wrote: > On Mon, Jul 30, 2012 at 06:15:26PM +0100, Brad Rogers wrote: > > On Mon, 30 Jul 2012 11:54:14 -0500 > > John Hasler wrote: > > > > Hello John, > > > > >Brad Rogers writes: > > >> Yeah, on a Post-It note. Stuck to the monitor.

RE: is it rational to close the 139 port

2012-07-31 Thread Bonno Bloksma
Hi, >> Gibberish implies one wouldn't be able to remember the >> password/phrase. > Which is why, as Bruce Schneir recommends, you _write it down_. Which is what I do. Whenever I need a new password I open my editor, close my eyes, randomly hit several keys on my keyboard and Bingo new random

Re: is it rational to close the 139 port

2012-07-31 Thread Chris Bannister
On Mon, Jul 30, 2012 at 06:15:26PM +0100, Brad Rogers wrote: > On Mon, 30 Jul 2012 11:54:14 -0500 > John Hasler wrote: > > Hello John, > > >Brad Rogers writes: > >> Yeah, on a Post-It note. Stuck to the monitor. > >That's what people do when you tell them not to write it down. _Tell_ > >them

strong passwords (was ... Re: is it rational to close the 139 port)

2012-07-31 Thread Chris Bannister
On Mon, Jul 30, 2012 at 07:14:06AM -0300, Henrique de Moraes Holschuh wrote: > On Mon, 30 Jul 2012, Andrei POPESCU wrote: > > > > http://xkcd.com/936/ > > > > (I wonder how much truth there is behind this comic...) > > Don't bother wondering. Read the paper. > > http://arstechnica.com/business

Re: is it rational to close the 139 port

2012-07-30 Thread Bob Proulx
Brian wrote: > Henrique de Moraes Holschuh wrote: > > Brian wrote: > > > used. But if it can be demonstrated that a twenty character password can > > > be forced in a time-frame which makes sense I'll stop doing it and most > > > > That depends. Are you using any dictionary words or easy characte

Re: is it rational to close the 139 port

2012-07-30 Thread Brian
On Sun 29 Jul 2012 at 22:27:08 -0300, Henrique de Moraes Holschuh wrote: > On Sun, 29 Jul 2012, Brian wrote: > > used. But if it can be demonstrated that a twenty character password can > > be forced in a time-frame which makes sense I'll stop doing it and most > > That depends. Are you using an

Re: is it rational to close the 139 port

2012-07-30 Thread Brad Rogers
On Mon, 30 Jul 2012 11:54:14 -0500 John Hasler wrote: Hello John, >Brad Rogers writes: >> Yeah, on a Post-It note. Stuck to the monitor. >That's what people do when you tell them not to write it down. _Tell_ >them to write it down and tell them _how_. As it happens, I agree with you; write

Re: is it rational to close the 139 port

2012-07-30 Thread John Hasler
I wrote: > Which is why, as Bruce Schneir recommends, you _write it down_. Brad Rogers writes: > Yeah, on a Post-It note. Stuck to the monitor. That's what people do when you tell them not to write it down. _Tell_ them to write it down and tell them _how_. They keep their credit cards and cash

Re: is it rational to close the 139 port

2012-07-30 Thread Brad Rogers
On Mon, 30 Jul 2012 09:28:51 -0500 John Hasler wrote: Hello John, >Which is why, as Bruce Schneir recommends, you _write it down_. Yeah, on a Post-It note. Stuck to the monitor. :-)) -- Regards _ / ) "The blindingly obvious is / _)radnever immediately a

Re: is it rational to close the 139 port

2012-07-30 Thread John Hasler
Stan Hoeppner writes: > Gibberish implies one wouldn't be able to remember the > password/phrase. Which is why, as Bruce Schneir recommends, you _write it down_. -- John Hasler -- To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact l

Re: is it rational to close the 139 port

2012-07-30 Thread Stan Hoeppner
On 7/30/2012 5:14 AM, Henrique de Moraes Holschuh wrote: > You need to have gibberish passphrases if you want it to be secure... Gibberish implies one wouldn't be able to remember the password/phrase. What you want is something recognizable to you but gibberish to all others. I've been using su

Re: is it rational to close the 139 port

2012-07-30 Thread Brad Rogers
On Mon, 30 Jul 2012 07:14:06 -0300 Henrique de Moraes Holschuh wrote: Hello Henrique, >You need to have gibberish passphrases if you want it to be secure... On one web site I use that requires a login, even pass phrases are impossible to use as at least one character has to be 'punctuation' plu

Re: is it rational to close the 139 port

2012-07-30 Thread Henrique de Moraes Holschuh
On Mon, 30 Jul 2012, Andrei POPESCU wrote: > On Du, 29 iul 12, 22:27:08, Henrique de Moraes Holschuh wrote: > > On Sun, 29 Jul 2012, Brian wrote: > > > used. But if it can be demonstrated that a twenty character password can > > > be forced in a time-frame which makes sense I'll stop doing it and m

Re: is it rational to close the 139 port

2012-07-30 Thread Andrei POPESCU
On Du, 29 iul 12, 22:27:08, Henrique de Moraes Holschuh wrote: > On Sun, 29 Jul 2012, Brian wrote: > > used. But if it can be demonstrated that a twenty character password can > > be forced in a time-frame which makes sense I'll stop doing it and most > > That depends. Are you using any dictionar

Re: is it rational to close the 139 port

2012-07-29 Thread Mark Allums
On 7/29/2012 8:27 PM, Henrique de Moraes Holschuh wrote: On Sun, 29 Jul 2012, Brian wrote: used. But if it can be demonstrated that a twenty character password can be forced in a time-frame which makes sense I'll stop doing it and most On (exceedingly) rare occasions, it does happen that the t

Re: is it rational to close the 139 port

2012-07-29 Thread Henrique de Moraes Holschuh
On Sun, 29 Jul 2012, Brian wrote: > used. But if it can be demonstrated that a twenty character password can > be forced in a time-frame which makes sense I'll stop doing it and most That depends. Are you using any dictionary words or easy character permutations thereof to make a pass-phrase? If

Re: is it rational to close the 139 port

2012-07-29 Thread Brian
On Sun 29 Jul 2012 at 15:00:04 -0300, Henrique de Moraes Holschuh wrote: > Well, it is the one account that will accept remote logins (in Debian) that > exists everywhere. True. But the security of an account doesn't depend on whether the username is known or unknown. If it does, you have problem

Re: is it rational to close the 139 port

2012-07-29 Thread Henrique de Moraes Holschuh
On Sun, 29 Jul 2012, Brian wrote: > On Sun 29 Jul 2012 at 13:12:31 -0400, Tom H wrote: > > On Sun, Jul 22, 2012 at 11:31 AM, Brian wrote: > > > No default configuration file will ever suit everyone or fit their > > > needs, but the Debian sshd_config doesn't seem to me to be have any > > > insecur

Re: is it rational to close the 139 port

2012-07-29 Thread Brian
On Sun 29 Jul 2012 at 13:12:31 -0400, Tom H wrote: > On Sun, Jul 22, 2012 at 11:31 AM, Brian wrote: > > > > No default configuration file will ever suit everyone or fit their > > needs, but the Debian sshd_config doesn't seem to me to be have any > > insecure aspects to it. > > Some might say th

Re: is it rational to close the 139 port

2012-07-29 Thread Tom H
On Sun, Jul 22, 2012 at 11:31 AM, Brian wrote: > > No default configuration file will ever suit everyone or fit their > needs, but the Debian sshd_config doesn't seem to me to be have any > insecure aspects to it. Some might say that "PermitRootLogin yes" default is insecure... -- To UNSUBSCRI

Re: is it rational to close the 139 port

2012-07-29 Thread Tom H
On Sun, Jul 22, 2012 at 3:25 AM, lina wrote: > > strangely my netstat showed my 139 and 445 ports are open. > > tcp0 0 0.0.0.0:445 0.0.0.0:* LISTEN > tcp0 0 0.0.0.0:139 0.0.0.0:* LISTEN > > Do I need specify > > -A INPUT

Re: is it rational to close the 139 port

2012-07-25 Thread Andrei POPESCU
On Lu, 23 iul 12, 12:00:37, Mark Allums wrote: > > > >True, but the downside is that you're going to experience random, > >confusing absences of functionality in various applications, and it can > >sometimes be difficult to figure out why ... > > It's dependency hell. Removing one highly useless

Re: is it rational to close the 139 port

2012-07-23 Thread Mark Allums
On 7/22/2012 11:19 PM, Celejar wrote: On Sun, 22 Jul 2012 18:58:36 +0200 Erwan David wrote: However, I have noticed a tendency for things to be installed or started that open new ports, and it's easy to overlook them. Aptitude in particular will install extra packages that you don't need or

Re: is it rational to close the 139 port

2012-07-23 Thread Lisi
On Sunday 22 July 2012 11:44:04 lina wrote: > > If you have a rainy afternoon to while away, install Wireshark and have > > a play with it. Try various network connections while a capture is > > running, and play with the filtering. One day you will need to use it > > in anger. >> Here "in anger",

Re: Disabling Recommends [was: Re: is it rational to close the 139 port]

2012-07-23 Thread Erwan David
On Mon, Jul 23, 2012 at 08:24:45AM CEST, Andrei POPESCU said: > On Du, 22 iul 12, 20:51:04, Erwan David wrote: > > > > > bug 375500, but you do not have the whole discussion > > Note that rephrasing it in 505662 leads to silence. > > > > SOme other but I cannot find them back, since they are old

Re: is it rational to close the 139 port

2012-07-22 Thread Andrei POPESCU
On Lu, 23 iul 12, 04:14:10, lina wrote: > > Thanks for your suggestions. I didn't realize aptitude would install > something else, and sometimes I treated the recommended as something > complimentary. Many times I left the laptop to install and myself run > outside to take a break. I don't

Re: Disabling Recommends [was: Re: is it rational to close the 139 port]

2012-07-22 Thread Andrei POPESCU
On Du, 22 iul 12, 20:51:04, Erwan David wrote: > > > bug 375500, but you do not have the whole discussion > Note that rephrasing it in 505662 leads to silence. > > SOme other but I cannot find them back, since they are old : I now > prefer directly installing non packaged programs when I encounter

Re: is it rational to close the 139 port

2012-07-22 Thread Richard Hector
On 22/07/12 21:31, Stan Hoeppner wrote: ~$ netstat -ant|grep LISTEN ... or ~$ netstat -lnt :-) Richard -- To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org Archive: http://lists.debian.org/500cdfda.

Re: is it rational to close the 139 port

2012-07-22 Thread Celejar
On Sun, 22 Jul 2012 18:58:36 +0200 Erwan David wrote: > > > However, I have noticed a tendency for things to be installed or > > started that open new ports, and it's easy to overlook them. Aptitude > > in particular will install extra packages that you don't need or want. > For this, first thin

Re: is it rational to close the 139 port

2012-07-22 Thread Chris Bannister
On Sun, Jul 22, 2012 at 10:01:50PM +0800, lina wrote: > Just today one website I cared about failed to open, certainly it's > under attack. And how does a firewall help in that case. If you don't want your intranet web server being accessed from outside, then that's what a firewall is for. It

Re: is it rational to close the 139 port

2012-07-22 Thread lina
On 23 Jul, 2012, at 0:44, Mark Allums wrote: > On 7/22/2012 11:09 AM, lina wrote: >> On Sun, Jul 22, 2012 at 11:53 PM, Brian wrote: >>> On Sun 22 Jul 2012 at 22:01:50 +0800, lina wrote: >>> On Sun, Jul 22, 2012 at 7:32 PM, Brian wrote: > Heaven above knows why you need a firewall. The

Re: Disabling Recommends [was: Re: is it rational to close the 139 port]

2012-07-22 Thread Erwan David
On 22/07/12 20:29, Andrei POPESCU wrote: > On Du, 22 iul 12, 20:15:33, Erwan David wrote: >> On 22/07/12 20:07, Andrei POPESCU wrote: >>> Please do file bugs where appropriate. >>> >> In the past I was too often attacked or mocked, when doing such bug >> reports that I stopped. > Would you care to

Re: Disabling Recommends [was: Re: is it rational to close the 139 port]

2012-07-22 Thread Andrei POPESCU
On Du, 22 iul 12, 20:15:33, Erwan David wrote: > On 22/07/12 20:07, Andrei POPESCU wrote: > > Please do file bugs where appropriate. > > > In the past I was too often attacked or mocked, when doing such bug > reports that I stopped. Would you care to provide some examples? Kind regards, Andrei --

Re: Disabling Recommends [was: Re: is it rational to close the 139 port]

2012-07-22 Thread Erwan David
On 22/07/12 20:07, Andrei POPESCU wrote: > On Du, 22 iul 12, 19:51:33, Erwan David wrote: >> Yes, indeed. But I've seen too many packages where recommends leeds to >> installing full gnome where I do not want it, that I prefer having more >> control (and thus more responsibility). > Please do file

Re: Disabling Recommends [was: Re: is it rational to close the 139 port]

2012-07-22 Thread Andrei POPESCU
On Du, 22 iul 12, 19:51:33, Erwan David wrote: > > > Yes, indeed. But I've seen too many packages where recommends leeds to > installing full gnome where I do not want it, that I prefer having more > control (and thus more responsibility). Please do file bugs where appropriate. Kind regards, Andr

Re: Disabling Recommends [was: Re: is it rational to close the 139 port]

2012-07-22 Thread Erwan David
On 22/07/12 19:29, Andrei POPESCU wrote: > On Du, 22 iul 12, 18:58:36, Erwan David wrote: >>> However, I have noticed a tendency for things to be installed or >>> started that open new ports, and it's easy to overlook them. Aptitude >>> in particular will install extra packages that you don't need

Re: is it rational to close the 139 port

2012-07-22 Thread Andrei POPESCU
On Du, 22 iul 12, 22:33:49, lina wrote: > > Another thing I am a little concern, > > I can ssh from remote server back to laptop without password. Passphraseless keys? > but on the remote server, actually someone who has root privilege can > easily su lina and ssh to my laptop (sorry to assume

Disabling Recommends [was: Re: is it rational to close the 139 port]

2012-07-22 Thread Andrei POPESCU
On Du, 22 iul 12, 18:58:36, Erwan David wrote: > > > However, I have noticed a tendency for things to be installed or > > started that open new ports, and it's easy to overlook them. Aptitude > > in particular will install extra packages that you don't need or want. > For this, first thing is to d

Re: is it rational to close the 139 port

2012-07-22 Thread Erwan David
> However, I have noticed a tendency for things to be installed or > started that open new ports, and it's easy to overlook them. Aptitude > in particular will install extra packages that you don't need or want. For this, first thing is to disable automatic installation of recommended packages, it

Re: is it rational to close the 139 port

2012-07-22 Thread Mark Allums
On 7/22/2012 11:09 AM, lina wrote: On Sun, Jul 22, 2012 at 11:53 PM, Brian wrote: On Sun 22 Jul 2012 at 22:01:50 +0800, lina wrote: On Sun, Jul 22, 2012 at 7:32 PM, Brian wrote: Heaven above knows why you need a firewall. These services are quite capable of getting on with life without ipta

Re: is it rational to close the 139 port

2012-07-22 Thread Mike McClain
Hi Lina, On Sun, Jul 22, 2012 at 03:25:03PM +0800, lina wrote: > > BTW, why need allow ping? from outside? > 59 # Allow ping > 60 -A INPUT -p icmp -m icmp --icmp-type 8 -j ACCEPT > > I know so little, thanks very much for your expilanation, > I've found www/grc.com/ and his 'ShieldsUp' sca

Re: is it rational to close the 139 port

2012-07-22 Thread lina
On Sun, Jul 22, 2012 at 11:53 PM, Brian wrote: > On Sun 22 Jul 2012 at 22:01:50 +0800, lina wrote: > >> On Sun, Jul 22, 2012 at 7:32 PM, Brian wrote: >> > >> > Heaven above knows why you need a firewall. These services are quite >> > capable of getting on with life without iptables being involved

Re: is it rational to close the 139 port

2012-07-22 Thread Brian
On Sun 22 Jul 2012 at 22:01:50 +0800, lina wrote: > On Sun, Jul 22, 2012 at 7:32 PM, Brian wrote: > > > > Heaven above knows why you need a firewall. These services are quite > > capable of getting on with life without iptables being involved. So are > > you. > > Just today one website I cared ab

Re: is it rational to close the 139 port

2012-07-22 Thread Brian
On Sun 22 Jul 2012 at 11:09:26 -0300, Henrique de Moraes Holschuh wrote: > On Sun, 22 Jul 2012, Brian wrote: > > The ssh and webserver daemons are available on the network. Presumably > > this is what you want. Their security will depend on how you have > > configured them. Debian sshd can be run

Re: is it rational to close the 139 port

2012-07-22 Thread Erwan David
On 22/07/12 16:09, Henrique de Moraes Holschuh wrote: > On Sun, 22 Jul 2012, Brian wrote: >> The ssh and webserver daemons are available on the network. Presumably >> this is what you want. Their security will depend on how you have >> configured them. Debian sshd can be run safely with the default

Re: is it rational to close the 139 port

2012-07-22 Thread lina
On Sun, Jul 22, 2012 at 10:09 PM, Henrique de Moraes Holschuh wrote: > On Sun, 22 Jul 2012, Brian wrote: >> The ssh and webserver daemons are available on the network. Presumably >> this is what you want. Their security will depend on how you have >> configured them. Debian sshd can be run safely

Re: is it rational to close the 139 port

2012-07-22 Thread Henrique de Moraes Holschuh
On Sun, 22 Jul 2012, Brian wrote: > The ssh and webserver daemons are available on the network. Presumably > this is what you want. Their security will depend on how you have > configured them. Debian sshd can be run safely with the default install. Sort of. The recommended "almost worry-free" co

Re: is it rational to close the 139 port

2012-07-22 Thread lina
On Sun, Jul 22, 2012 at 7:32 PM, Brian wrote: > On Sun 22 Jul 2012 at 18:08:25 +0800, lina wrote: > >> On Sun, Jul 22, 2012 at 5:31 PM, Stan Hoeppner >> wrote: >> > On 7/22/2012 3:37 AM, lina wrote: >> > >> >> P.S I also found >> >> >> >> tcp0 0 127.0.0.1:631 0.0.0.0:*

Re: is it rational to close the 139 port

2012-07-22 Thread Camaleón
On Sun, 22 Jul 2012 15:25:03 +0800, lina wrote: > strangely my netstat showed my 139 and 445 ports are open. > > tcp0 0 0.0.0.0:445 0.0.0.0:*LISTEN > tcp0 0 0.0.0.0:139 0.0.0.0:*LISTEN > > Do I need specify > > -A INPUT

Re: is it rational to close the 139 port

2012-07-22 Thread Stephan Seitz
On Sun, Jul 22, 2012 at 06:44:04PM +0800, lina wrote: Thanks, packet looks for the IP address first or MAC address first? (seems I read something before, it's a book/document written in 2001, kinda of aged? still don't understand.) IPv4 hasn’t change since then, and IPv6 is working quite simili

Re: is it rational to close the 139 port

2012-07-22 Thread Henrique de Moraes Holschuh
On Sun, 22 Jul 2012, lina wrote: > strangely my netstat showed my 139 and 445 ports are open. > > tcp0 0 0.0.0.0:445 0.0.0.0:* LISTEN > tcp0 0 0.0.0.0:139 0.0.0.0:* LISTEN > > Do I need specify > > -A INPUT -p tcp --dp

Re: is it rational to close the 139 port

2012-07-22 Thread Pascal Hambourg
Claudius Hubig a écrit : > > While it is technically possible to block these requests for IPv4, > you should never block ICMPv6, since it is necessary to do SLAAC. Not only SLAAC (which is optional) but also neighbour discovery, which is mandatory in most cases on a shared medium such as ethernet

Re: is it rational to close the 139 port

2012-07-22 Thread Brian
On Sun 22 Jul 2012 at 18:08:25 +0800, lina wrote: > On Sun, Jul 22, 2012 at 5:31 PM, Stan Hoeppner wrote: > > On 7/22/2012 3:37 AM, lina wrote: > > > >> P.S I also found > >> > >> tcp0 0 127.0.0.1:631 0.0.0.0:* LISTEN > >> tcp0 0 127.0.0.1:25

Re: is it rational to close the 139 port

2012-07-22 Thread lina
On Sun, Jul 22, 2012 at 5:18 PM, Joe wrote: > On Sun, 22 Jul 2012 16:44:13 +0800 > lina wrote: > >> >> Checked, now only 22 80 open with 443 closed. >> another thing is that the nmap can scan my MAC address correctly. >> is it bad? (I guess I will feel comfortable if the MAC address is >> hidden)

Re: is it rational to close the 139 port

2012-07-22 Thread Joe
On Sun, 22 Jul 2012 11:32:58 +0200 Pascal Hambourg wrote: > Joe a écrit : > > > > All network communication is actually based on MAC addresses > > No. Communication over an ethernet network is, but not all network > communication is. > > I realise that, but there are only so many levels of c

Re: is it rational to close the 139 port

2012-07-22 Thread lina
On Sun, Jul 22, 2012 at 5:14 PM, Pascal Hambourg wrote: > Hello, > > lina a écrit : >> root@debian:/etc/iptables# dpkg --get-selections | grep gdomap >> >> no gdomap installed, >> # dpkg -L gdomap >> Package `gdomap' is not installed. >> Use dpkg --info (= dpkg-deb --info) to examine archive files

Re: is it rational to close the 139 port

2012-07-22 Thread Lars Noodén
On 07/22/2012 01:08 PM, lina wrote: > Thanks, I only know 22, 25, 631 80 for ssh, email, cups and http, > respectively, > > Best regards, > > P.S I will be glad to know more. You can get the official list of what goes where from the file /etc/services Regards /Lars -- To UNSUBSCRIBE, email

Re: is it rational to close the 139 port

2012-07-22 Thread lina
On Sun, Jul 22, 2012 at 5:31 PM, Stan Hoeppner wrote: > On 7/22/2012 3:37 AM, lina wrote: > >> P.S I also found >> >> tcp0 0 127.0.0.1:631 0.0.0.0:* LISTEN >> tcp0 0 127.0.0.1:250.0.0.0:* LISTEN >> tcp0 0 0.0.

Re: is it rational to close the 139 port

2012-07-22 Thread Claudius Hubig
Hello lina, this is a rather strange name :) lina wrote: > BTW, why need allow ping? from outside? > 59 # Allow ping > 60 -A INPUT -p icmp -m icmp --icmp-type 8 -j ACCEPT It doesn’t help to block ICMP echo requests: - if you block them by dropping them, the other party knows that you are (

Re: is it rational to close the 139 port

2012-07-22 Thread Pascal Hambourg
Joe a écrit : > > All network communication is actually based on MAC addresses No. Communication over an ethernet network is, but not all network communication is. -- To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lis

Re: is it rational to close the 139 port

2012-07-22 Thread Joe
On Sun, 22 Jul 2012 16:58:33 +0800 lina wrote: > sorry, this one is easy to read > > # netstat -tupan | grep 538 > tcp0 0 0.0.0.0:538 0.0.0.0:* > LISTEN 2366/gdomap > udp0 0 0.0.0.0:538 0.0.0.0:* > 2366/gdomap > > > gdomap appear

Re: is it rational to close the 139 port

2012-07-22 Thread Stan Hoeppner
On 7/22/2012 3:37 AM, lina wrote: > P.S I also found > > tcp0 0 127.0.0.1:631 0.0.0.0:* LISTEN > tcp0 0 127.0.0.1:250.0.0.0:* LISTEN > tcp0 0 0.0.0.0:538 0.0.0.0:* LISTEN Instead of

Re: is it rational to close the 139 port

2012-07-22 Thread Pascal Hambourg
Hello, lina a écrit : > root@debian:/etc/iptables# dpkg --get-selections | grep gdomap > > no gdomap installed, > # dpkg -L gdomap > Package `gdomap' is not installed. > Use dpkg --info (= dpkg-deb --info) to examine archive files, > and dpkg --contents (= dpkg-deb --contents) to list their conte

Re: is it rational to close the 139 port

2012-07-22 Thread Joe
On Sun, 22 Jul 2012 16:44:13 +0800 lina wrote: > > Checked, now only 22 80 open with 443 closed. > another thing is that the nmap can scan my MAC address correctly. > is it bad? (I guess I will feel comfortable if the MAC address is > hidden) > All network communication is actually based on MA

Re: is it rational to close the 139 port

2012-07-22 Thread lina
sorry, this one is easy to read # netstat -tupan | grep 538 tcp0 0 0.0.0.0:538 0.0.0.0:* LISTEN 2366/gdomap udp0 0 0.0.0.0:538 0.0.0.0:* 2366/gdomap Thanks, -- To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org with a

Re: is it rational to close the 139 port

2012-07-22 Thread lina
On Sun, Jul 22, 2012 at 4:44 PM, Joe wrote: > On Sun, 22 Jul 2012 16:37:16 +0800 > lina wrote: > >> >> P.S I also found >> >> tcp0 0 127.0.0.1:631 0.0.0.0:* >> LISTEN tcp0 0 127.0.0.1:25 >> 0.0.0.0:* LISTEN tcp0 0 >> 0.0.0.0:538

Re: is it rational to close the 139 port

2012-07-22 Thread lina
On Sun, Jul 22, 2012 at 4:35 PM, Joe wrote: > On Sun, 22 Jul 2012 15:59:29 +0800 > lina wrote: > >> On Sun, Jul 22, 2012 at 3:49 PM, Andrei POPESCU >> wrote: >> > On Du, 22 iul 12, 15:41:16, lina wrote: >> >> >> >> Thanks, I don't have some basic understanding about samba, >> >> will read someth

Re: is it rational to close the 139 port

2012-07-22 Thread Joe
On Sun, 22 Jul 2012 16:37:16 +0800 lina wrote: > > P.S I also found > > tcp0 0 127.0.0.1:631 0.0.0.0:* > LISTEN tcp0 0 127.0.0.1:25 > 0.0.0.0:* LISTEN tcp0 0 > 0.0.0.0:538 0.0.0.0:* LISTEN > > > 631 is fo

Re: is it rational to close the 139 port

2012-07-22 Thread lina
On Sun, Jul 22, 2012 at 4:30 PM, Stan Hoeppner wrote: > On 7/22/2012 2:59 AM, lina wrote: >> On Sun, Jul 22, 2012 at 3:49 PM, Andrei POPESCU >> wrote: >>> On Du, 22 iul 12, 15:41:16, lina wrote: Thanks, I don't have some basic understanding about samba, will read something about it

Re: is it rational to close the 139 port

2012-07-22 Thread Joe
On Sun, 22 Jul 2012 15:59:29 +0800 lina wrote: > On Sun, Jul 22, 2012 at 3:49 PM, Andrei POPESCU > wrote: > > On Du, 22 iul 12, 15:41:16, lina wrote: > >> > >> Thanks, I don't have some basic understanding about samba, > >> will read something about it. > >> just a short quick question, is it ne

Re: is it rational to close the 139 port

2012-07-22 Thread Stan Hoeppner
On 7/22/2012 2:59 AM, lina wrote: > On Sun, Jul 22, 2012 at 3:49 PM, Andrei POPESCU > wrote: >> On Du, 22 iul 12, 15:41:16, lina wrote: >>> >>> Thanks, I don't have some basic understanding about samba, >>> will read something about it. >>> just a short quick question, is it necessary to keep it?

Re: is it rational to close the 139 port

2012-07-22 Thread lina
On Sun, Jul 22, 2012 at 3:49 PM, Andrei POPESCU wrote: > On Du, 22 iul 12, 15:41:16, lina wrote: >> >> Thanks, I don't have some basic understanding about samba, >> will read something about it. >> just a short quick question, is it necessary to keep it? > > Only you can tell since we don't know w

Re: is it rational to close the 139 port

2012-07-22 Thread Andrei POPESCU
On Du, 22 iul 12, 15:41:16, lina wrote: > > Thanks, I don't have some basic understanding about samba, > will read something about it. > just a short quick question, is it necessary to keep it? Only you can tell since we don't know what you use/need. Kind regards, Andrei -- Offtopic discussions

Re: is it rational to close the 139 port

2012-07-22 Thread lina
On Sun, Jul 22, 2012 at 3:36 PM, Stan Hoeppner wrote: > On 7/22/2012 2:25 AM, lina wrote: > > Hi Lina, Hi, > >> strangely my netstat showed my 139 and 445 ports are open. >> >> tcp0 0 0.0.0.0:445 0.0.0.0:* LISTEN >> tcp0 0 0.0.0.0:139

Re: is it rational to close the 139 port

2012-07-22 Thread Stan Hoeppner
On 7/22/2012 2:25 AM, lina wrote: Hi Lina, > strangely my netstat showed my 139 and 445 ports are open. > > tcp0 0 0.0.0.0:445 0.0.0.0:* LISTEN > tcp0 0 0.0.0.0:139 0.0.0.0:* LISTEN These ports are used by Samba. If