Velocity Reviews - Computer Hardware Reviews

Velocity Reviews > Newsgroups > Computing > Computer Security > scanning

Reply
Thread Tools

scanning

 
 
bruce
Guest
Posts: n/a
 
      02-11-2005
**If I port scan a LAN box with IP 192.168.1.3 from itself I get

Scan of 1 IP started at Fri Feb 11 20:34:44 2005

-------------------------------------------------------------------------------
192.168.1.3
Responded in 0 ms.
0 hops away
Responds with ICMP unreachable: Yes
TCP ports: 135 139 445
UDP ports: 123 137 138 445 500 1028 1900

-------------------------------------------------------------------------------

Scan finished at Fri Feb 11 20:34:53 2005

**If I scan that IP from another machine on the LAN (192.168.1.2) I
get

Scan of 1 IP started at Fri Feb 11 20:36:10 2005

-------------------------------------------------------------------------------
192.168.1.3
Responded in 0 ms.
0 hops away
Responds with ICMP unreachable: No
TCP ports: 139 445
UDP ports:

-------------------------------------------------------------------------------

Scan finished at Fri Feb 11 20:36:35 2005

*****

Nowhere in the doc for my modem router can I find anything on
restricting ports for LAN addresses.

My modem router is a netcomm nb1300+4

and I am using scanline to run the scans

How do I control which ports are accessable between PCs on the LAN?

Can anybody shed any light on this for me?

Thanks

Bruce
 
Reply With Quote
 
 
 
 
phoenix
Guest
Posts: n/a
 
      02-11-2005
On Fri, 11 Feb 2005 20:41:47 +0800, bruce wrote:

> snip
> How do I control which ports are accessable between PCs on the LAN?
>

Install a firewall on each PC.

Regards

Bill
 
Reply With Quote
 
 
 
 
IPGrunt
Guest
Posts: n/a
 
      02-12-2005
On 11 Feb 2005, bruce <(E-Mail Removed)> postulated in
news:(E-Mail Removed):

> **If I port scan a LAN box with IP 192.168.1.3 from itself I get
>
> Scan of 1 IP started at Fri Feb 11 20:34:44 2005
>
> -------------------------------------------------------------------

------------
> 192.168.1.3
> Responded in 0 ms.
> 0 hops away
> Responds with ICMP unreachable: Yes
> TCP ports: 135 139 445
> UDP ports: 123 137 138 445 500 1028 1900
>
> -------------------------------------------------------------------

------------
>
> Scan finished at Fri Feb 11 20:34:53 2005
>
> **If I scan that IP from another machine on the LAN (192.168.1.2) I
> get
>
> Scan of 1 IP started at Fri Feb 11 20:36:10 2005
>
> -------------------------------------------------------------------

------------
> 192.168.1.3
> Responded in 0 ms.
> 0 hops away
> Responds with ICMP unreachable: No
> TCP ports: 139 445
> UDP ports:
>
> -------------------------------------------------------------------

------------
>
> Scan finished at Fri Feb 11 20:36:35 2005
>
> *****
>
> Nowhere in the doc for my modem router can I find anything on
> restricting ports for LAN addresses.
>
> My modem router is a netcomm nb1300+4
>
> and I am using scanline to run the scans
>
> How do I control which ports are accessable between PCs on the LAN?
>
> Can anybody shed any light on this for me?
>
> Thanks
>
> Bruce


Bruce,

There is no firewall in this box, but it does NAT. This means that
devices on the internet cannot directly address your LAN devices, as
they exist on non-routable IP addresses.

There is some risk involved with this setup from connections you
initiate from the LAN, however, you are relatively safe from random
probes to your workstations.

You can either buy a real firewall device that will explicitly block
ports, or you can install so-called personal firewall programmes
(like Zone-Alarm), that will provide this stateful packet inspection
task for you.

-- ipgrunt

 
Reply With Quote
 
 
 
Reply

Thread Tools

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are Off


Similar Threads
Thread Thread Starter Forum Replies Last Post
Scanning Wireless Lans =?Utf-8?B?WmVyb2JpYXM=?= Wireless Networking 0 10-19-2005 11:31 AM
Perl, Email, and Scanning Anthony Papillion II Perl 1 11-11-2004 04:41 AM
Re: Built an document scanning application Steve Haigh ASP .Net 0 04-08-2004 12:11 PM
Scanning Ajit ASP .Net 1 09-02-2003 11:53 PM
Re: Image Scanning - TWAIN equivalent Brendan Duffy ASP .Net 0 07-24-2003 08:29 AM



Advertisments