I DID IT! Achieved security perfection!

[TCM]

Originally Posted by Kipperfillets

You guys must be able to read fast as when I type that in the window is only there for a fraction of a second! is there a way to make it stay open?

on xp, type cmd to get a shell. then type netstat -a there.

[cmay119]

How exactly am I able to get Port 113 to stealth...It keeps saying it's just closed, and I'm failing the port scan test because of it...any help would be appreciated.

I'm Using Zonealarm Free for my software firewall and NOD32 for Antivirus. I also have a hardware firewall with the following features:
NAT with VPN Passthrough
MAC Filtering
IP Filtering
URL Filtering
Domain Blocking
Scheduling
64/128-bit encryption (I'm using 128-bit)

Is there something else I can do? I have firewall settings at high security for internet and trusted zones.

Thanks in advance.

[REVAN_abx]

Originally Posted by cmay119

How exactly am I able to get Port 113 to stealth...It keeps saying it's just closed, and I'm failing the port scan test because of it...any help would be appreciated.

I'm Using Zonealarm Free for my software firewall and NOD32 for Antivirus. I also have a hardware firewall with the following features:
NAT with VPN Passthrough
MAC Filtering
IP Filtering
URL Filtering
Domain Blocking
Scheduling
64/128-bit encryption (I'm using 128-bit)

Is there something else I can do? I have firewall settings at high security for internet and trusted zones.



Thanks in advance.

Just forward port 113 to non existant machine on your network with your hardware firewall, ussually a router. That should do it.

[TCM]

"forward to nonexistant machine", what an obscure and kludgy "solution". first, if you "stealth" port 113 you will notice that irc connects, for example take very long since the irc server tries to reach your port 113. it won't go on immediately like it would when being told "no service here". instead, it times out after x tries with y seconds delay each.

port 113 is actually a good example of breakage due to the braindead need to stealth all ports.

then, forwarding to nonexistant machines can cause problems later if you actually put a machine on that address. configuring things in such a way that they somehow work now but have the potential to break things when infrastructure changes is bad admin work.

actually, the failure to stealth port 113 is probably caused by a provident manufacturer who knows that stealthing port 113 will cause problems for services which rely on it, thus he prevented it but overlooked the "clever" solution that wannabe-paranoid consumers come up with.

it's just sad.

[deg]

Anyone know what this apparently looped connection to my workstation is? I get this from netstat.

TCP wks1:710 wks1.netfrastructure.pvt:1027 ESTABLISHED
TCP wks1:1027 wks1.netfrastructure.pvt:710 ESTABLISHED

[TCM]

try the -o option and compare the pid with the task manager.

[azproc]

Originally Posted by TCM

do you actually mean the program uses that port to listen for incoming connections? "accessing that port" sounds like the program is not on your computer.

The program uses that port for incoming connections. The program IS installed on the computer (albeit it's only ONE of my 4 networked computers).

[jxman]

Dear Moderators,

Yes, there is good information in this thread but I think some of the post have crossed the threshold of respect that I have come to expect here at ABXZone. Once crossed, I don't care how good the info is, I'd perfer to find it else where.


....Not ment to offend anyone but just a little hot..

[cmay119]

Funny thing is, noone really answered my question...

[theonlybabyface]

Originally Posted by cmay119

Funny thing is, noone really answered my question...

Sure they did. It has actually been answered twice in the thread. What you need to do is forward port 113 to an IP address within your gateway but not on your LAN. Your router should be able to do this or if you have the DMZ option, forward all ports to an IP address within your gateway but not on your LAN. That's all there is to it.