PDA

View Full Version : sygate scan...port 21 closed not blocked ???



kraai
28-08-2004, 20:48
http://scan.sygate.com

>>"FTP 21 CLOSED
This port has responded to our probes. This means that you are not running any application on this port, but it is still possible for someone to crash your computer through known TCP/IP stack vulnerabilities.

other ports are blocked."<<

My wl500g uses standard rules. I didn't enable the firewall.
(I tried a firewall rule blocking all traffic from *.*.*.* on port 20/21 but that didn't work).

Can I block this port somehow ?

kraai

tomilius
27-02-2005, 20:13
You must follow these instructions exactly. Or.. if you have some knowledge, you can use vi, but whatever.

Slightly modified from Oleg's instructions (http://wl500g.dyndns.org/):

mkdir -p /usr/local/sbin
echo "#!/bin/sh" > /usr/local/sbin/post-firewall
echo "iptables -D INPUT -p tcp -m tcp -d \$2 --dport 21 -j ACCEPT" >> /usr/local/sbin/post-firewall
chmod +x /usr/local/sbin/post-firewall

If you want to test it, type this:

post-firewall 0 <insert your WAN ip address here>

To save your configuration (after testing it--if you don't, it'll be lost on reboot):

flashfs enable
flashfs save
flashfs commit

And to reboot:

reboot

EDIT: Didn't realize how old this thread was :)

kraai
28-02-2005, 07:14
EDIT: Didn't realize how old this thread was :)

;) Doesn't matter. I never got an answer. So yours is very welcome !

regards,

Kraai