• Categories
  • Recent
  • Tags
  • Popular
  • Users
  • Search
  • Register
  • Login
Netgate Discussion Forum
  • Categories
  • Recent
  • Tags
  • Popular
  • Users
  • Search
  • Register
  • Login

GRC ShieldsUP! detects open ports

Scheduled Pinned Locked Moved General pfSense Questions
9 Posts 6 Posters 7.2k Views
Loading More Posts
  • Oldest to Newest
  • Newest to Oldest
  • Most Votes
Reply
  • Reply as topic
Log in to reply
This topic has been deleted. Only users with topic management privileges can see it.
  • C
    cylent
    last edited by Jan 19, 2010, 7:37 AM

    so i did a test on my pfsense box today and grc ShieldsUP says:

    –--------------------------------------------------------------------

    GRC Port Authority Report created on UTC: 2010-01-19 at 07:34:48

    Results from scan of ports: 0-1055

    1 Ports Open
        2 Ports Closed
    1053 Ports Stealth

    1056 Ports Tested

    The port found to be OPEN was: 80

    Ports found to be CLOSED were: 0, 1

    Other than what is listed above, all ports are STEALTH.

    TruStealth: FAILED - NOT all tested ports were STEALTH,
                      - NO unsolicited packets were received,
                      - NO Ping reply (ICMP Echo) was received.


    Quote: "Solicited TCP Packets: RECEIVED (FAILED)  — As detailed in the port report below, one or more of your system's ports actively responded to our deliberate attempts to establish a connection. It is generally possible to increase your system's security by hiding it from the probes of potentially hostile hackers. Please see the details presented by the specific port links below, as well as the various resources on this site, and in our extremely helpful and active user community."

    So i assume its talking about port 80 here. what can i do to fix this?

    1 Reply Last reply Reply Quote 0
    • W
      wallabybob
      last edited by Jan 19, 2010, 8:47 AM

      Port 80 is probably the http port for the pfSense web GUI. (Thats the default. It can be changed if you wish.)

      There can be good reason to keep the web GUI accessible from the WAN, but if you don't like it, you can add a firewall rule to block that. The web GUI is password protected so it might not be a big security risk, but if you are serious about security you should probably change the web GUI from plaintext (http) to encrypted (https).

      1 Reply Last reply Reply Quote 0
      • H
        Hugovsky
        last edited by Jan 19, 2010, 9:55 AM

        With the default rules, grc doesn't detect open ports with me. How are you connecting to the internet? where does your wan interface connect to?

        1 Reply Last reply Reply Quote 0
        • C
          cylent
          last edited by Jan 19, 2010, 9:57 AM

          Yes. these are default options in pfsenes.

          I am connecting the wan port to a VSAT satellite modem.

          the modem has no port 80!

          1 Reply Last reply Reply Quote 0
          • X
            XIII
            last edited by Jan 19, 2010, 8:47 PM

            modems do, all ip devices do, its not detecting the modem but pfSense. the modem just forwards all requests to the fw. most modems ports are only accessible on private ips (you and your isp can access it)
            for example cox gives private class a ips to all modems and a public one

            try to connect to yourip.com, chances are it will connect to pf.

            -Chris Stutzman
            Sys0:2.0.1: AMD Sempron 140 @2.7 1024M RAM 100GHD
            Sys1:2.0.1: Intel P4 @2.66 1024M RAM 40GHD
            freedns.afraid.org - Free DNS dynamic DNS subdomain and domain hosting.
            Check out the pfSense Wiki

            1 Reply Last reply Reply Quote 0
            • D
              dotdash
              last edited by Jan 19, 2010, 11:07 PM

              No. By default the webgui is not open on the WAN. There are no open ports on a default install. If you are failing the shields up test you configured something wrong. Or it's not coming from your firewall.

              1 Reply Last reply Reply Quote 0
              • H
                Hugovsky
                last edited by Jan 19, 2010, 11:29 PM

                Exactly my point.

                1 Reply Last reply Reply Quote 0
                • X
                  XIII
                  last edited by Jan 20, 2010, 12:04 AM

                  thats why you need to connect to that port to see whats using it.
                  have upnp enabled? check nat entries.

                  -Chris Stutzman
                  Sys0:2.0.1: AMD Sempron 140 @2.7 1024M RAM 100GHD
                  Sys1:2.0.1: Intel P4 @2.66 1024M RAM 40GHD
                  freedns.afraid.org - Free DNS dynamic DNS subdomain and domain hosting.
                  Check out the pfSense Wiki

                  1 Reply Last reply Reply Quote 0
                  • C
                    chpalmer
                    last edited by Jan 20, 2010, 1:30 AM

                    No. By default the webgui is not open on the WAN. There are no open ports on a default install. If you are failing the shields up test you configured something wrong. Or it's not coming from your firewall.

                    what he said ^

                    Satellite…  dont they put you on a proxy?  The results may be showing you something related to the noc...

                    Triggering snowflakes one by one..
                    Intel(R) Core(TM) i5-4590T CPU @ 2.00GHz on an M400 WG box.

                    1 Reply Last reply Reply Quote 0
                    1 out of 9
                    • First post
                      1/9
                      Last post
                    Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.
                      This community forum collects and processes your personal information.
                      consent.not_received