This article to you will explain that what you did see in firewall's record (Log)? What meanings especially are these ports? You will be able to use these information to make the judgment: Whether I have come under the Hacker attack? What does his/she want to do? This article both are suitable for the maintenance enterprise firewall's security expert, and is suitable in uses individual firewall's family user.
Now individual firewall starts to be popular, once many net friends saw the warning thought comes under some kind of attack, actually the majority situations are not true.
First, goal port ZZZZ is any meaning
All passes through firewall's communication is a connection part. A connection contains one pair mutually “the conversation” IP address as well as pair and IP address correspondence port. The goal port usually means some kind of service which connects. When the firewall prevents (block) some connection, it the goal port “on record” (logfile). This will describe these port's significance.
The port may divide into 3 broad headings:
1) recognizes the port (Well Known Ports): From 0 to 1023, they bind closely in some services. Usually these port's communication has indicated some kind of service agreement explicitly. For example: 80 port in fact always HTTP communication.
2) registers the port (Registered Ports): From 1024 to 49151. They bind loosely in some services. That is many service binding in these ports, these ports uses in many other goals similarly. For example: Many system processing dynamic port starts from 1024.
3) dynamic and/or private port (Dynamic and/or Private Ports): From 49152 to 65535. Theoretically, should not to serve assigns these ports. In fact, the machine usually assigns the dynamic port from 1024. But also has the exception: SUN RPC port from 32768 starts.
Obtains the more comprehensive port information from where:
The port database, contains many system vulnerabilities the ports.
3. /etc/services
In the UNIX system document /etc/services contains the usual use the UNIX port to assign the tabulation. In Windows NT this document located at %systemroot%/system32/drivers/etc/services.
TLSecurity Trojan port tabulation. Is different with other person's collection, the author examined all ports.
7. http://www.simovits.com/nyheter9902.html
Trojan Horse survey.
Second, which usually has regarding firewall's TCP/UDP port scanning?
This narration usual TCP/UDP port scanning in firewall record information. Remembering: Does not have the so-called ICMP port. If you to explain the ICMP data to be interested, please refer to this article other parts.
You are here: hacking technology
> firewall
> Content
Category: Home
> firewall