what should I use for "unassigned" ports?
Hi All,
A long time ago, I used
unassgn=1024:65535
for my unassigned ports. As in
--sport $unassgn
Having taken a more recent look at "/etc/services", I am finding zillions of service ports above 1024.
With that in mind, is there a better starting port for my "unassigned" ports?
Many thanks,
-T
Signature · 3 lines
------------------------- I Fish. Therefore, I am. -------------------------
2010/1/6 Anthony Ewell <[email protected]>:
Quoted 6 lines
Having taken a more recent look at "
/etc/services", I am finding zillions of service ports above 1024.With that in mind, is there a better starting port for my "unassigned" ports?
Sadly these days nope - the assigned port numbers are now all over the place.
However, alot of them are not likely to be in use on your system so you ought to define your unassigned port range by what you are actually running not by the contents of /etc/services (same goes for protocols).
Signature · 5 lines
Richard Horton Users are like a virus: Each causing a thousand tiny crises until the host finally dies. http://www.solstans.co.uk - Solstans Japanese Bobtails and Norwegian Forest Cats http://www.pbase.com/arimus - My online photogallery
Hello,
Quoted 8 lines · Anthony Ewell
A long time ago, I used
unassgn=1024:65535for my unassigned ports. As in
--sport $unassgn
What do you need this for ?
2010/1/6 Anthony Ewell <[email protected]>:
Quoted 8 lines
Hi All,
Having taken a more recent look at "
/etc/services", I am finding zillions of service ports above 1024.With that in mind, is there a better starting port for my "unassigned" ports?
If you are purely trying to block traffic which is to services not running then you could just change the default policies to drop and then only explicitly allow what you want which is alot safer.
If you need this for logging then place a log rule as the last rule in the table.
Signature · 5 lines
Richard Horton Users are like a virus: Each causing a thousand tiny crises until the host finally dies. http://www.solstans.co.uk - Solstans Japanese Bobtails and Norwegian Forest Cats http://www.pbase.com/arimus - My online photogallery
Quoted 9 lines · Richard Horton
2010/1/6 Anthony Ewell<[email protected]>:
Quoted 6 lines
Having taken a more recent look at "
/etc/services", I am finding zillions of service ports above 1024.With that in mind, is there a better starting port for my "unassigned" ports?
Quoted 6 lines
Sadly these days nope - the assigned port numbers are now all over the place.
However, alot of them are not likely to be in use on your system so you ought to define your unassigned port range by what you are actually running not by the contents of
/etc/services(same goes for protocols).
So, pick the highest port I use and go somewhat above that. That will work. Thank you!
-T