Skip to content
This repository has been archived by the owner on May 23, 2019. It is now read-only.

Exploring the listening network services

Gabriel Iovino edited this page Jul 8, 2015 · 7 revisions

Listening network services

A clean installation of CIF on Ubuntu 14.04 should create a network profile similar to this:

sudo netstat -lnptu

Active Internet connections (only servers)
Proto Recv-Q Send-Q Local Address      Foreign Address   State    PID/Program name
tcp        0      0 192.168.1.12:53    0.0.0.0:*         LISTEN   898/named (Bind9)      
tcp        0      0 127.0.0.1:53       0.0.0.0:*         LISTEN   898/named (Bind9)
tcp        0      0 0.0.0.0:22         0.0.0.0:*         LISTEN   818/sshd        
tcp        0      0 0.0.0.0:25         0.0.0.0:*         LISTEN   1030/master (Postfix)
tcp        0      0 127.0.0.1:953      0.0.0.0:*         LISTEN   898/named (Bind9)
tcp        0      0 0.0.0.0:4961       0.0.0.0:*         LISTEN   1548/perl       
tcp        0      0 0.0.0.0:4963       0.0.0.0:*         LISTEN   1548/perl       
tcp6       0      0 :::9200            :::*              LISTEN   1264/java       
tcp6       0      0 :::80              :::*              LISTEN   1108/apache2    
tcp6       0      0 :::9300            :::*              LISTEN   1264/java       
tcp6       0      0 :::53              :::*              LISTEN   898/named (Bind9)
tcp6       0      0 :::22              :::*              LISTEN   818/sshd        
tcp6       0      0 :::25              :::*              LISTEN   1030/master (Postfix)
tcp6       0      0 ::1:953            :::*              LISTEN   898/named (Bind9)
tcp6       0      0 :::443             :::*              LISTEN   1108/apache2    
tcp6       0      0 :::5000            :::*              LISTEN   1624/cif.psgi   

Internet facing Ports:

  • 25/tcp -> smtp
  • 53/tcp -> dns
  • 80/tcp -> http
  • 443/tcp -> https
  • 5000/tcp -> wsgi
  • 9200/tcp -> elastic search

Firewall

If no firewall rules are detected, the firewall is enabled and the two ports open to the world are 22 (ssh) and 443 (https).

Clone this wiki locally