Results 1 to 10 of 10

Thread: Port Scan

  1. #1
    Join Date
    Jun 2010
    Posts
    66

    * Port Scan

    I have a VPS sever with full root access. When I port scan with Zenmap its give a little too much information like all my open parts and banner information. How can I improve my security and make little or no information show when am port scanned I installed port sentry for a start I have a CentOS Linux system with Plesk installed. Newbie by the way

  2. #2
    you might want to try and use /etc/hosts.allow and /etc/hosts.deny

    For example if you just wanted to permit http traffic.

    /etc/hosts.allow
    Code:
    httpd: ALL
    /etc/hosts.deny
    Code:
    ALL: ALL
    Last edited by jack369; 06-10-2010 at 08:32 PM.

  3. #3
    Join Date
    Jun 2010
    Posts
    66
    what does that do

  4. #4
    That should allow you to block anything that you do not need. Just remember to add rules for ssh, smtp or anything else you might need.

  5. #5
    Join Date
    Jun 2010
    Posts
    66
    thanks i will try that now

  6. #6
    Join Date
    Mar 2009
    Location
    InfoPark, Cochin, India
    Posts
    986
    Which firewall do you use? I recommend to you to install CSF firewall in the server and block all the unused ports in the server.

  7. #7
    Join Date
    Mar 2009
    Location
    InfoPark, Cochin, India
    Posts
    986
    Quote Originally Posted by jack369 View Post
    /etc/hosts.deny
    Code:
    ALL: ALL
    Don't do this!!!!! if you put this directive, you will be able to access only http and no other service in the server.

  8. #8
    Join Date
    Jun 2010
    Posts
    66
    i didnt do it lol i use the firewall that comes with Plesk Panel i have version 9.3.0

  9. #9
    Plesk firewall is good too but in case of a mess it's difficult to get it going since it involves a database. I would recommend CSF for you.
    | LinuxHostingSupport.net
    | Server Setup | Security | Optimization | Troubleshooting | Server Migration
    | Monthly and Task basis services.
    | MSN : madaboutlinux[at]hotmail.com | Skype : madaboutlinux

  10. #10
    Quote Originally Posted by wwwwa View Post
    I have a VPS sever with full root access. When I port scan with Zenmap its give a little too much information like all my open parts and banner information. How can I improve my security and make little or no information show when am port scanned I installed port sentry for a start I have a CentOS Linux system with Plesk installed. Newbie by the way
    Once you get a good firewall and IP banning utility (CSF + LFD gets another vote here), then look at:

    1. Disabling any unwanted daemons (services)
    2. Opening up only the ports you need in the firewall
    4. Changing banner information (ie remove any version information if possible).

    Something like CSF+LFD can pickup port scanning and block that IP temporarily. Not perfect, but it can help.

Similar Threads

  1. Port Scan! Legal?
    By Babushka99 in forum Hosting Security and Technology
    Replies: 4
    Last Post: 11-19-2004, 12:17 PM
  2. port scan service
    By XMLxp in forum Hosting Security and Technology
    Replies: 4
    Last Post: 10-17-2004, 02:32 PM
  3. 27347 port scan
    By Tux-e-do in forum Hosting Security and Technology
    Replies: 2
    Last Post: 12-01-2003, 12:47 AM
  4. Powweb Doing Port Scan?
    By Prisoner in forum Web Hosting
    Replies: 8
    Last Post: 09-28-2002, 08:53 PM
  5. Odd Port Scan Logs
    By diesel1 in forum Dedicated Server
    Replies: 4
    Last Post: 08-27-2002, 01:59 PM

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •