Firewall - Konfiguration

Firewall - Konfiguration

Impressum | Werbung

Geizhals » Forum » Netzwerk »

Firewall - Konfiguration (11 Beiträge, 172 Mal gelesen)

Top-100 | Fresh-100

Du bist nicht angemeldet. [ Login/Registrieren ]

Möchte meine Firewall so konfigurieren, daß alle Ports gesperrt sind außer 80, 20, usw. Hat jemand eine Liste bzw. Link wo die genutzten Ports der gängigen Dienste/Programme/Anwedungen zusammengefasst sind (z.B: HTTP - Port 80, FTP - Port xxx, ICQ - Ports xx, xxx, xxx)?
LG Joachim

PORT NUMBERS

(last updated 2002-12-03)

The port numbers are divided into three ranges: the Well Known Ports,
the Registered Ports, and the Dynamic and/or Private Ports.

The Well Known Ports are those from 0 through 1023.

The Registered Ports are those from 1024 through 49151

The Dynamic and/or Private Ports are those from 49152 through 65535

### UNASSIGNED PORT NUMBERS SHOULD NOT BE USED.  THE IANA WILL ASSIGN
THE NUMBER FOR THE PORT AFTER YOUR APPLICATION HAS BEEN APPROVED ###

WELL KNOWN PORT NUMBERS

The Well Known Ports are assigned by the IANA and on most systems can
only be used by system (or root) processes or by programs executed by
privileged users.

Ports are used in the TCP [RFC793] to name the ends of logical
connections which carry long term conversations.  For the purpose of
providing services to unknown callers, a service contact port is
defined.  This list specifies the port used by the server process as
its contact port.  The contact port is sometimes called the
"well-known port".

To the extent possible, these same port assignments are used with the
UDP [RFC768].

The range for assigned ports managed by the IANA is 0-1023.

Port Assignments:

Keyword         Decimal    Description                     References
-------         -------    -----------                     ----------
                  0/tcp    Reserved
                  0/udp    Reserved
#                          Jon Postel
tcpmux            1/tcp    TCP Port Service Multiplexer
tcpmux            1/udp    TCP Port Service Multiplexer
#                          Mark Lottor
compressnet       2/tcp    Management Utility
compressnet       2/udp    Management Utility
compressnet       3/tcp    Compression Process
compressnet       3/udp    Compression Process
#                          Bernie Volz
#                 4/tcp    Unassigned
#                 4/udp    Unassigned
rje               5/tcp    Remote Job Entry
rje               5/udp    Remote Job Entry
#                          Jon Postel
#                 6/tcp    Unassigned
#                 6/udp    Unassigned
echo              7/tcp    Echo
echo              7/udp    Echo
#                          Jon Postel
#                 8/tcp    Unassigned
#                 8/udp    Unassigned
discard           9/tcp    Discard
discard           9/udp    Discard
#                          Jon Postel
#                10/tcp    Unassigned
#                10/udp    Unassigned
systat           11/tcp    Active Users
systat           11/udp    Active Users
#                          Jon Postel
#                12/tcp    Unassigned
#                12/udp    Unassigned
daytime          13/tcp    Daytime (RFC 867)
daytime          13/udp    Daytime (RFC 867)
#                          Jon Postel
#                14/tcp    Unassigned
#                14/udp    Unassigned
#                15/tcp    Unassigned [was netstat]
#                15/udp    Unassigned
#                16/tcp    Unassigned
#                16/udp    Unassigned
qotd             17/tcp    Quote of the Day
qotd             17/udp    Quote of the Day
#                          Jon Postel
msp              18/tcp    Message Send Protocol
msp              18/udp    Message Send Protocol
#                          Rina Nethaniel <---none--->
chargen          19/tcp    Character Generator
chargen          19/udp    Character Generator
ftp-data         20/tcp    File Transfer [Default Data]
ftp-data         20/udp    File Transfer [Default Data]

ftp              21/tcp    File Transfer [Control]
ftp              21/udp    File Transfer [Control]
#                          Jon Postel
ssh              22/tcp    SSH Remote Login Protocol
ssh              22/udp    SSH Remote Login Protocol
#                          Tatu Ylonen
telnet           23/tcp    Telnet
telnet           23/udp    Telnet
#                          Jon Postel
                 24/tcp    any private mail system
                 24/udp    any private mail system
#                          Rick Adams
smtp             25/tcp    Simple Mail Transfer
smtp             25/udp    Simple Mail Transfer
#                          Jon Postel
#                26/tcp    Unassigned
#                26/udp    Unassigned
nsw-fe           27/tcp    NSW User System FE
nsw-fe           27/udp    NSW User System FE
#                          Robert Thomas
#                28/tcp    Unassigned
#                28/udp    Unassigned
msg-icp          29/tcp    MSG ICP
msg-icp          29/udp    MSG ICP
#                          Robert Thomas
#                30/tcp    Unassigned
#                30/udp    Unassigned
msg-auth         31/tcp    MSG Authentication
msg-auth         31/udp    MSG Authentication
#                          Robert Thomas
#                32/tcp    Unassigned
#                32/udp    Unassigned
dsp              33/tcp    Display Support Protocol
dsp              33/udp    Display Support Protocol
#                          Ed Cain
#                34/tcp    Unassigned
#                34/udp    Unassigned
                 35/tcp    any private printer server
                 35/udp    any private printer server
#                          Jon Postel
#                36/tcp    Unassigned
#                36/udp    Unassigned
time             37/tcp    Time
time             37/udp    Time
#                          Jon Postel
rap              38/tcp    Route Access Protocol
rap              38/udp    Route Access Protocol
#                          Robert Ullmann
rlp              39/tcp    Resource Location Protocol
rlp              39/udp    Resource Location Protocol
#                          Mike Accetta
#                40/tcp    Unassigned
#                40/udp    Unassigned
graphics         41/tcp    Graphics
graphics         41/udp    Graphics
name             42/tcp    Host Name Server
name             42/udp    Host Name Server
nameserver       42/tcp    Host Name Server
nameserver       42/udp    Host Name Server
nicname          43/tcp    Who Is
nicname          43/udp    Who Is
mpm-flags        44/tcp    MPM FLAGS Protocol
mpm-flags        44/udp    MPM FLAGS Protocol
mpm              45/tcp    Message Processing Module [recv]
mpm              45/udp    Message Processing Module [recv]
mpm-snd          46/tcp    MPM [default send]
mpm-snd          46/udp    MPM [default send]
#                          Jon Postel
ni-ftp           47/tcp    NI FTP
ni-ftp           47/udp    NI FTP
#                          Steve Kille
auditd           48/tcp    Digital Audit Daemon
auditd           48/udp    Digital Audit Daemon
#                          Larry Scott
tacacs           49/tcp    Login Host Protocol (TACACS)
tacacs           49/udp    Login Host Protocol (TACACS)
#                          Pieter Ditmars
re-mail-ck       50/tcp    Remote Mail Checking Protocol
re-mail-ck       50/udp    Remote Mail Checking Protocol
#                          Steve Dorner
la-maint         51/tcp    IMP Logical Address Maintenance
la-maint         51/udp    IMP Logical Address Maintenance
#                          Andy Malis
xns-time         52/tcp    XNS Time Protocol
xns-time         52/udp    XNS Time Protocol
#                          Susie Armstrong
domain           53/tcp    Domain Name Server
domain           53/udp    Domain Name Server
#                          Paul Mockapetris
xns-ch           54/tcp    XNS Clearinghouse
xns-ch           54/udp    XNS Clearinghouse
#                          Susie Armstrong
isi-gl           55/tcp    ISI Graphics Language
isi-gl           55/udp    ISI Graphics Language
xns-auth         56/tcp    XNS Authentication
xns-auth         56/udp    XNS Authentication
#                          Susie Armstrong
                 57/tcp    any private terminal access
                 57/udp    any private terminal access
#                          Jon Postel
xns-mail         58/tcp    XNS Mail
xns-mail         58/udp    XNS Mail
#                          Susie Armstrong
                 59/tcp    any private file service
                 59/udp    any private file service
#                          Jon Postel

Ich glaub ein Link tut's auch und ist leichter zu lesen.

http://www.iana.org/assignments/port-numbers

________________________________________________________________________
America is the only country that went from barbarism
to decadence without civilization in between.
Oscar Wild

Aber mal im Ernst, hast Du bei Dir Server laufen oder geht's nur um's Zugreifen?

________________________________________________________________________
America is the only country that went from barbarism
to decadence without civilization in between.
Oscar Wild

Es geht nur ums Zugreifen.
LG Joachim

Dann brauchst auch keine Ports offen lassen (zum Surfen), bestenfalls für ICQ oder P2P Software.

________________________________________________________________________
America is the only country that went from barbarism
to decadence without civilization in between.
Oscar Wild

Ich nehm mal an für einen upload mittels FTP brauch ichauch offene Ports - oder irre ich mich da?
LG Joachim

ja, aber nur ausgehend!

http://faq.at/firewalls

http://faq.at/firewalls

Dieses Forum ist eine frei zugängliche Diskussionsplattform.
Der Betreiber übernimmt keine Verantwortung für den Inhalt der Beiträge und behält sich das Recht vor, Beiträge mit rechtswidrigem oder anstößigem Inhalt zu löschen.
Datenschutzerklärung