To view parent comment, click here.
To read all comments associated with this story, please click here.
Aahm... what's happening... I'd line iXsystems to check several (unnecessary) open TCP and UDP ports (139, 445, ipp, syslog etc.)... that would be great. :-)
What open ports? This is my PC-BSD 1.3B1 firewall and I selected only port 22 (SSH) for connectivity in installer- by default all ports are closed. Of course you can open/close your favorite ports if you wish.
# pfctl -sa
FILTER RULES:
scrub in all fragment reassemble
block drop all
pass out inet proto icmp all icmp-type echoreq keep state
pass on nve0 proto icmp all
pass out on nve0 proto tcp from (nve0) to any keep state
pass out on nve0 proto udp from (nve0) to any keep state
pass in on nve0 proto tcp from any to (nve0) port = ssh keep state
block drop on nve0 from <blacklist> to any
No queue in use
Edited 2006-10-24 17:36
What open ports?
This is a TCP / UDP report about the PC-BSD machine on our local net, portscanned using nmap(1) from the server (sorry for not in HTML -tt- mode):
% nmap -sT -sU -O 192.168.1.40
Interesting ports on 192.168.1.40:
(The 3107 ports scanned but not shown below are in state: closed)
Port State Service
22/tcp open ssh
137/udp open netbios-ns
138/udp open netbios-dgm
139/tcp open netbios-ssn
445/tcp open microsoft-ds
514/udp open syslog
631/tcp open ipp
631/udp open unknown
It really looks strange to me. Of course, an open ssh port is really NO problem.
This is my PC-BSD 1.3B1 firewall and I selected only port 22 (SSH) for connectivity in installer- by default all ports are closed.
Really? Is PF (or IPFW) enabled by default? Seems that someone has to review his configuration... :-)
Of course you can open/close your favorite ports if you wish.
Of course you can, it's a BSD. :-)





Member since:
2006-10-08
PC-BSD looks nice though, eventhough I think I'll continue using plain FreeBSD it's interesting to see.
I'll do the same.
Aahm... what's happening... I'd line iXsystems to check several (unnecessary) open TCP and UDP ports (139, 445, ipp, syslog etc.)... that would be great. :-)