Har precis köpt en ny router, och för att testa att allt verkar fugera gällande brandvägg/NAT så gjorde jag en portscanning av mig själv för att se vad som är öppet.
Jag har en server på mitt LAN och har därför gjort portforvard till den för följande tjänster:
httpd tcp port 80
sshd tcp port 34
rtorrent tcp port 2000-2020
nu till min fundering, vad innebär det när en port är vidarebefordrad till min server, men programmet (rtorrent), använder inte porten för tillfället, dvs den är "closed", är detta något som kan innebära en risk?
Sidan jag körde portscan från var denna:https://pentest-tools.com/network-vulnerability-scanning/tcp-port-scanner-online-nmap#
Så här såg resultatet ut
Starting Nmap 6.00 ( http://nmap.org ) at 2016-03-06 21:11 EET
NSE: Loaded 17 scripts for scanning.
Initiating Ping Scan at 21:11
Scanning XXX.XXX.XXX.XXX [4 ports]
Completed Ping Scan at 21:11, 0.07s elapsed (1 total hosts)
Initiating SYN Stealth Scan at 21:11
Scanning XXX.XXX.XXX.XXX.priv.bahnhof.se (XXX.XXX.XXX.XXX) [2048 ports]
Discovered open port 80/tcp on XXX.XXX.XXX.XXX
Discovered open port 2002/tcp on XXX.XXX.XXX.XXX
Discovered open port 34/tcp on XXX.XXX.XXX.XXX
Completed SYN Stealth Scan at 21:11, 6.44s elapsed (2048 total ports)
Initiating Service scan at 21:11
Scanning 3 services on XXX.XXX.XXX.XXX.priv.bahnhof.se (XXX.XXX.XXX.XXX)
Completed Service scan at 21:13, 126.97s elapsed (3 services on 1 host)
Initiating OS detection (try #1) against XXX.XXX.XXX.XXX.priv.bahnhof.se (XXX.XXX.XXX.XXX)
Retrying OS detection (try #2) against XXX.XXX.XXX.XXX.priv.bahnhof.se (XXX.XXX.XXX.XXX)
NSE: Script scanning XXX.XXX.XXX.XXX.
[+] Nmap scan report for XXX.XXX.XXX.XXX.priv.bahnhof.se (XXX.XXX.XXX.XXX)
Host is up (0.038s latency).
Not shown: 2025 filtered ports
PORT STATE SERVICE VERSION
34/tcp open ssh OpenSSH 6.0p1 Debian 4+deb7u3 (protocol 2.0)
80/tcp open http Apache httpd 2.2.22 ((Debian))
2000/tcp closed cisco-sccp
2001/tcp closed dc
2002/tcp open globe?
2003/tcp closed finger
2004/tcp closed mailbox
2005/tcp closed deslogin
2006/tcp closed invokator
2007/tcp closed dectalk
2008/tcp closed conf
2009/tcp closed news
2010/tcp closed search
2011/tcp closed raid-cc
2012/tcp closed ttyinfo
2013/tcp closed raid-am
2014/tcp closed troff
2015/tcp closed cypress
2016/tcp closed bootserver
2017/tcp closed unknown
2018/tcp closed terminaldb
2019/tcp closed whosockami
2020/tcp closed xinupageserver
1 service unrecognized despite returning data. If you know the service/version, please submit the following fingerprint at http://www.insecure.org/cgi-bin/servicefp-submit.cgi :
SF-Port2002-TCP:V=6.00%I=7%D=3/6%Time=56DC8132%P=x86_64-unknown-linux-gnu%
SF:r(Kerberos,16C,"wG\x85\xb8n\xe8\x0f\xe9\+\x1b\x8d\x1d\*C\x17\x85\[4\xaa
SF:F{kB1Y\xa2y{\xc4\xf3q\xd1\xbc\nU\xd2TO\xdau\xdc\xaf\xd4>\x0f\+se\x03>F\
SF:?\xb2\xda4\xdc\x92\xbd\xc0\x81\xff\xf3\x9am\x9ac\xa6\xee\xf16\xa8;\xd1n
SF:\xe26\x0e\x027\xe9<\x9a3\x02G\xfe6q\xf8\xeb\xd6\xe1k\$\xfb\x8a\x06o%\xc
SF:d\xb4k\xa1\x03\xaez\x03M!\x1d\x8f\n\xfa>\x84\xd9v\xf5\xf4\xa8\xa7\xec\x
SF:82Oc\xf3\[ic\x817\x17\xec\xd8\x1b\x9bR\x1e\xe8s<w~6\xb5\x02\x0f,\xf7\x0
SF:4\xd4\x9e\xf0V\xeeSJI\xbd\xad\xca\xf4\xc4\xb7\xcc\xdfR\x1f\xfe:\x92:\xb
SF:2\x10pg\x12\x80\x93\t\x84h\xa8t\xbe\x96\xc8\x08\xdf\x85\xb5\xaayzaEY\xb
SF:3dW\xed\xf7\x91\x9f\x07\x02\x07\x1a\x82\x9a#\x06\x02\xcbz\xc1aB\xc9A\xc
SF:7\x7f\xeb@\xf9L\x86R\xff\xea\xaa\xec\xe1;\x8c\xe9=\x93\x03\xbf-&\xc50\x
SF:f2@\xf1S\x82\xba\x94J9\x7f\x8a2\xcb\x10\x85\xca\xfb/\xb7\xdcjC\xc5\xa8\
SF:xd6\xc8g\x03\xef-3\xe1m\$4\xef\xdf\xc99\x18H\xc4K\x14\xd4\xd0\xde\xcf\x
SF:ff\x95\xaci\xd8q\x11\xae:y\xb2\)\xa6\xe5\n\x13\n>\x02\xe9\x07<\x01P\0Ld
SF:\xd4\x1cB\xa4\x1b\xd8P\x85\xb0\xc1\x96_\xfb\x0f\x11\$\xb5\xf6\.\xc8\0m\
SF:xcb\xe9t\x07\xeb\xc4\x077\(\xdbTk\x7foC\xcf\xf4\xf3\x91\x8bR\x8c\x9a")%
SF:r(SMBProgNeg,15B,"A\xc5\x9a\$\x14\x8c\x0e\xce\x84\x8d\x12l\"\xed\xbc\xf
SF:a\xc28k\x90V\x17\?\xe0\x99t\xf4\x03\x0c\r\xcd\xbd\xban\xe3\xe9\x0f\x97\
SF:xa8n\xec\xa3\xf5\*\xaa\xb5\xf1\xba\x9b\xee\xda\xb9~P\x9b\xc1\xca\x82\[\
SF:xab\xe2\x04\xaa\xaaZ\x19\xec\xa2D\x9c\x8b\xec\x92\xfd96\x14\x99\x03us\x
SF:f9\xeb\x05iM}\x8e\xae\xc5\)\xbc\xe0\x12\^\xf7\xf9\x9f\xb8\xa0\0\x11<\xb
SF:5#\xdc\xe2w0\xcfB\xd5\x7f\xd9\xf4b\xa6W\x8c\xc8\x12\xbd\xfat\xd9\x05o\x
SF:d2\xa4'r\xa49\xaeZ\\\x8a<\xd3\xbb\x0b\x15\x90\x8b\xee\x85\xed\x94\xdcy\
SF:\\xee6Vb\x0f\[\xd2\xe1\xff\xf9S\xa42\x01\xfe\x8e\x8c:aGEw\xd7\xd0e\\\xb
SF:d\xfa86V'm\xad\x89\|\x08\[\^\x08U\xb1\xac\x87\xb3\xaa\x16\?\xe4w\x86\)\
SF:xee\]\xfaT\xba\xb7N\xf2\xee\xa4\x19\[Q\xa3\xd7Z\xfe5bS\xe7\x0e\xdb\x9a\
SF:xb8\xf1\xd9\x9ch_\xc5W\xbc\xbf\xabvw\xf9ie\x9d\x82\xc0\xef%\x97I\$\xcd\
SF:xabw\xb4\xb9RNqC'\r\xac\x86\xd2\x03B\x92\xae\xb9\t\xa7\"nD\xa4\.3\xca\x
SF:c5\|\xee\x92'eF\xe0\xb8\x94Q\xfb\xbb\^\xa7A1\xaa\x84\xc3X=\xcc\xff_:D\x
SF:03hw\xcd-\xf4\xbb\xc0\x1b!\x06\xfc\xd9\x9bM\xd4V\xac\|\x98\xdd&\x1c\xa0
SF:\x7fYl~\xb8\xa6\xc2\xbb\x0e:\x89;\.D\xfbIe");
Device type: general purpose|specialized|storage-misc|WAP|media device
Running (JUST GUESSING): Linux 2.6.X|3.X|2.4.X (90%), Crestron 2-Series (87%), HP embedded (87%), Netgear embedded (87%), Western Digital embedded (87%), Linksys Linux 2.4.X (85%)
OS CPE: cpe:/o:linux:kernel:2.6 cpe:/o:linux:kernel:3 cpe:/o:crestron:2_series cpe:/o:linux:kernel:2.6.22 cpe:/o:linksys:linux:2.4 cpe:/o:linux:kernel:2.4
Aggressive OS guesses: Linux 2.6.23 - 2.6.38 (90%), Linux 2.6.39 (90%), Linux 2.6.32 - 2.6.39 (90%), Linux 2.6.38 - 3.2 (89%), Linux 2.6.32 (89%), Linux 2.6.38 (88%), Linux 2.6.38 - 3.0 (88%), Linux 3.0 - 3.1 (88%), Linux 2.6.26 (88%), Linux 2.6.8 - 2.6.27 (88%)
No exact OS matches for host (test conditions non-ideal).
Uptime guess: 14.466 days (since Sun Feb 21 10:03:37 2016)
TCP Sequence Prediction: Difficulty=257 (Good luck!)
IP ID Sequence Generation: All zeros
Service Info: OS: Linux; CPE: cpe:/o:linux:kernel
OS and Service detection performed. Please report any incorrect results at http://nmap.org/submit/ .
Nmap done: 1 IP address (1 host up) scanned in 138.29 seconds
Raw packets sent: 4146 (187.244KB) | Rcvd: 101 (9.053KB)