Working on the Internet!

Hi,
I install in my pc an Apache server (v1.3.x) for working locally and I have
administrative rights to a hosting account, I am using Windows XP  + SP2 +
fixes up to date and I'm very concerned about security over the internet;  I
wanted to know if there is anything I should do to enforce my security under
this scenario that I may have not knowledge of.
I have no firewall installed (only the Windows XP firewall) and the test in
ShieldsUp! tell me that only my 80 port is open, witch I think is normal. I
have a DSL account via router connected 24hs a day.

Thanks for any suggestions that you may have.
Regards.


0
ASL
4/19/2006 11:19:39 PM
grc.shieldsup 2699 articles. 0 followers. Follow

15 Replies
521 Views

Similar Articles

[PageSpeed] 40

ASL wrote:
> Hi,
> I install in my pc an Apache server (v1.3.x) for working locally and I have
> administrative rights to a hosting account, I am using Windows XP  + SP2 +
> fixes up to date and I'm very concerned about security over the internet;  I
> wanted to know if there is anything I should do to enforce my security under
> this scenario that I may have not knowledge of.
> I have no firewall installed (only the Windows XP firewall) and the test in
> ShieldsUp! tell me that only my 80 port is open, witch I think is normal. I
> have a DSL account via router connected 24hs a day.
> 
> Thanks for any suggestions that you may have.
> Regards.

Firstly, I would install the latest version (2.0.55 is the latest stable 
release IIRC), 1.3 is getting a little long in the tooth now.

Secondly, if you only want to work locally then there is no need to have 
port 80 accessible from the net at all - block it in the router (maybe 
by forwarding it to an unused local IP, or DMZ). If you leave it open to 
the net you WILL get intrusion attempts (check the access and error logs).

Finally I would install a decent firewall - remember that Windows 
Firewall does not block outbound attempts.

Oh, and if you are only going to use it on occasion then consider start 
and stopping it manually rather that have it start automatically when 
windows starts.

General security tips can be found at 
<http://httpd.apache.org/docs/2.0/misc/security_tips.html>

HTH

-- 
Steve.
Please reply to the group. From/ReplyTo are invalid.
0
Screwball
4/20/2006 10:21:29 AM
On Wed, 19 Apr 2006 20:19:39 -0300, "ASL" <xxxx@asdasd.com> wrote:

>Hi,
>I install in my pc an Apache server (v1.3.x) for working locally and I have
>administrative rights to a hosting account, I am using Windows XP  + SP2 +
>fixes up to date and I'm very concerned about security over the internet;  I
>wanted to know if there is anything I should do to enforce my security under
>this scenario that I may have not knowledge of.
>I have no firewall installed (only the Windows XP firewall)

That's not a good firewall. You should install one. It needs to allow
port 80. some firewalls allow a distinction between LAN and WAN. Only
LAN should be enabled. A router should NOT pass port 80, since you
want local access only.

> and the test in
>ShieldsUp! tell me that only my 80 port is open, witch I think is normal. I
>have a DSL account via router connected 24hs a day.
>

Port 80 is normally open for a web server. If you just want local
access, it should not be available on the internet.

>Thanks for any suggestions that you may have.
>Regards.
>
-- 
Mark Lloyd
http://notstupid.laughingsquid.com

"Democracy is two wolves and a lamb voting on what
to have for lunch. Liberty is a well armed lamb
contesting the vote." - Benjamin Franklin
0
Mark
4/20/2006 1:39:13 PM
I have disabled Apache and MySQL servers as Windows Services and reboot the
system and actually Shields! is steel telling me that port 80 is open.
How can I close it?

Also I have installed he free version of ZoneAlarm 6 to try it out. 


0
ASL
4/20/2006 6:39:02 PM
"ASL" <xxxx@asdasd.com> wrote in message news:e28kg9$16f$1@news.grc.com...
>I have disabled Apache and MySQL servers as Windows Services and reboot the
> system and actually Shields! is steel telling me that port 80 is open.
> How can I close it?

Do you have IIS running?  TCPView might show you what program is using port 
80 (assuming your ISP doesn't use a proxy, which I doubt.)

http://www.sysinternals.com/Utilities/TcpView.html

-- 
Robert
GRC Newsgroups/Guidelines/No Regrets
http://www.grc.com/groups/techtalk:155486




0
Robert
4/20/2006 8:04:57 PM
I've disconected IIS completly when i installed Apache,
TCPView tells me nothing about port 80.
It shows only 2 TCP ports in Listening state:

System:4     mypcname: microsoft-ds    Remoteadreess: mypcname:0

System:4 mypcname: company.com: netbios:ssn  Remoteadreess: mypcname:0



"Robert Wycoff" <rwycoff@[127.0.0.1]> escribi� en el mensaje 
news:e28phb$78c$1@news.grc.com...
> "ASL" <xxxx@asdasd.com> wrote in message news:e28kg9$16f$1@news.grc.com...
>>I have disabled Apache and MySQL servers as Windows Services and reboot 
>>the
>> system and actually Shields! is steel telling me that port 80 is open.
>> How can I close it?
>
> Do you have IIS running?  TCPView might show you what program is using 
> port
> 80 (assuming your ISP doesn't use a proxy, which I doubt.)
>
> http://www.sysinternals.com/Utilities/TcpView.html
>
> -- 
> Robert
> GRC Newsgroups/Guidelines/No Regrets
> http://www.grc.com/groups/techtalk:155486
>
>
>
> 


0
ASL
4/20/2006 8:25:33 PM
"ASL" <xxxx@asdasd.com> wrote in message news:e28qo0$8n9$1@news.grc.com...
> I've disconected IIS completly when i installed Apache,
> TCPView tells me nothing about port 80.
> It shows only 2 TCP ports in Listening state:
>
> System:4     mypcname: microsoft-ds    Remoteadreess: mypcname:0
>
> System:4 mypcname: company.com: netbios:ssn  Remoteadreess: mypcname:0

Options>Resolve Address can be turned off and on, which will show IP address 
and port number in the Remote Address column.

-- 
Robert
GRC Newsgroups/Guidelines/No Regrets
http://www.grc.com/groups/techtalk:155486


0
Robert
4/20/2006 8:33:24 PM
Ok,
The 2 remote addresses are 0.0.0.0

System:4 TCP 0.0.0.0:445 0.0.0.0:0 LISTENING
System:4 TCP 192.168.1.2:139 0.0.0.0:0 LISTENING

What does this mean?
Tank you.


"Robert Wycoff" <rwycoff@[127.0.0.1]> escribi� en el mensaje 
news:e28r6m$9a0$1@news.grc.com...
> "ASL" <xxxx@asdasd.com> wrote in message news:e28qo0$8n9$1@news.grc.com...
>> I've disconected IIS completly when i installed Apache,
>> TCPView tells me nothing about port 80.
>> It shows only 2 TCP ports in Listening state:
>>
>> System:4     mypcname: microsoft-ds    Remoteadreess: mypcname:0
>>
>> System:4 mypcname: company.com: netbios:ssn  Remoteadreess: mypcname:0
>
> Options>Resolve Address can be turned off and on, which will show IP 
> address
> and port number in the Remote Address column.
>
> -- 
> Robert
> GRC Newsgroups/Guidelines/No Regrets
> http://www.grc.com/groups/techtalk:155486
>
> 


0
ASL
4/20/2006 8:46:43 PM
"ASL" <xxxx@asdasd.com> wrote in message news:e28rvm$aas$1@news.grc.com...
> Ok,
> The 2 remote addresses are 0.0.0.0
>
> System:4 TCP 0.0.0.0:445 0.0.0.0:0 LISTENING
> System:4 TCP 192.168.1.2:139 0.0.0.0:0 LISTENING

We have a saying for this;  your computer is talking to itself.  <g>

That's not completely accurate, but the IP address of 0.0.0.0 is actually 
your computer.  This means the ports are not open to the Internet.  Here is 
what the two ports are:

http://www.grc.com/port_445.htm

http://www.grc.com/port_139.htm


-- 
Robert
GRC Newsgroups/Guidelines/No Regrets
http://www.grc.com/groups/techtalk:155486





0
Robert
4/20/2006 9:16:14 PM
On Thu, 20 Apr 2006 17:25:33 -0300, "ASL" <xxxx@asdasd.com> wrote:

>I've disconected IIS completly when i installed Apache,
>TCPView tells me nothing about port 80.
>It shows only 2 TCP ports in Listening state:
>
>System:4     mypcname: microsoft-ds    Remoteadreess: mypcname:0
>
>System:4 mypcname: company.com: netbios:ssn  Remoteadreess: mypcname:0

Go to http://centralops.net/co/DomainDossier.aspx and run a service
scan against 200.40.239.182.

I tried to post the results but the message is being rejected.

-- 
js
0
john
4/20/2006 9:19:22 PM
"john s. smith" <reply_here@local.invalid> wrote in message 
news:lkuf42p03toc06mmoj5ljkbuggn8ekdkd7@4ax.com...
> On Thu, 20 Apr 2006 17:25:33 -0300, "ASL" <xxxx@asdasd.com> wrote:
>
>>I've disconected IIS completly when i installed Apache,
>>TCPView tells me nothing about port 80.
>>It shows only 2 TCP ports in Listening state:
>>
>>System:4     mypcname: microsoft-ds    Remoteadreess: mypcname:0
>>
>>System:4 mypcname: company.com: netbios:ssn  Remoteadreess: mypcname:0
>
> Go to http://centralops.net/co/DomainDossier.aspx and run a service
> scan against 200.40.239.182.
>
> I tried to post the results but the message is being rejected.

You have to break the text /html string.

Address lookup
      canonical name r200-40-239-182-dialup.adsl.anteldata.net.uy.
      aliases
      addresses 200.40.239.182


Service scan
      FTP - 21 Error: ConnectionRefused
      SMTP - 25 Error: ConnectionRefused
      HTTP - 80 HTTP/1.0 401 Unauthorized
      Server: httpd-impacct/1.10 10/2003
      Content-type: text /html
      Connection: close
      Cache-Control: no-cache
      Content-length: 65535
      WWW-Authenticate: Basic realm="Web manager"
      POP3 - 110 Error: ConnectionRefused
      NNTP - 119 Error: ConnectionRefused


-- 
Robert
GRC Newsgroups/Guidelines/No Regrets
http://www.grc.com/groups/techtalk:155486


0
Robert
4/20/2006 9:26:36 PM
On Thu, 20 Apr 2006 16:26:36 -0500, "Robert  Wycoff"
<rwycoff@[127.0.0.1]> wrote:

>You have to break the text /html string.
>
>Address lookup
>      canonical name r200-40-239-182-dialup.adsl.anteldata.net.uy.
>      aliases
>      addresses 200.40.239.182
>
>
>Service scan
>      FTP - 21 Error: ConnectionRefused
>      SMTP - 25 Error: ConnectionRefused
>      HTTP - 80 HTTP/1.0 401 Unauthorized
>      Server: httpd-impacct/1.10 10/2003
>      Content-type: text /html
>      Connection: close
>      Cache-Control: no-cache
>      Content-length: 65535
>      WWW-Authenticate: Basic realm="Web manager"
>      POP3 - 110 Error: ConnectionRefused
>      NNTP - 119 Error: ConnectionRefused

Thanks. I'll mark this message and hopefully be able to find it next
time. Now that you've pointed out the solution, I'll likely remember.

-- 
js

0
john
4/20/2006 9:28:49 PM
ASL wrote:
> I have disabled Apache and MySQL servers as Windows Services and reboot the
> system and actually Shields! is steel telling me that port 80 is open.
> How can I close it?
> 
> Also I have installed he free version of ZoneAlarm 6 to try it out. 
> 

Two things spring to mind (but be aware that it's late here and the 
brain is very slightly numb...)

One is that your router has a "remote configuration" feature on port 80 
- many do. If so, disable it (unless you really, really need it) ASAP.

Second is that I seem to recall, however vaguely, that IIS actually has 
a web server built in - and configured "on" by default. Never used it 
myself so I cannot be certain of this, but it wouldn't hurt to check.

If you install ZAP and port 80 still seems to be open, then something 
upstream from your PC is responding - hence suggestion (1).

HTH

-- 
Steve.
Please reply to the group. From/ReplyTo are invalid.
0
Screwball
4/20/2006 9:36:35 PM
Ok,
Thanks a lot for the help to all of you.
Regards. 


0
ASL
4/20/2006 9:47:29 PM
On Thu, 20 Apr 2006 17:46:43 -0300, ASL wrote:

> Ok,
> The 2 remote addresses are 0.0.0.0
> 
> System:4 TCP 0.0.0.0:445 0.0.0.0:0 LISTENING
> System:4 TCP 192.168.1.2:139 0.0.0.0:0 LISTENING
> 
> What does this mean?

IP address 0.0.0.0 usually means, "all adapters". If you have multiple
Ethernet adapters, this IP address refers to them all.

IP address 192.168.1.2 is a single Ethernet adapter, which has that IP
address.

Either way, you are not showing a remote connection beyond your LAN.

-- 
Norman
~Oh Lord, why have you come
~To Konnyu, with the Lion and the Drum
0
Norman
4/21/2006 12:13:44 AM
On Wed, 19 Apr 2006 20:19:39 -0300, ASL wrote:

> Hi,
> I install in my pc an Apache server (v1.3.x) for working locally and I have
> administrative rights to a hosting account, I am using Windows XP  + SP2 +
> fixes up to date and I'm very concerned about security over the internet;  I
> wanted to know if there is anything I should do to enforce my security under
> this scenario that I may have not knowledge of.
> I have no firewall installed (only the Windows XP firewall) and the test in
> ShieldsUp! tell me that only my 80 port is open, witch I think is normal. I
> have a DSL account via router connected 24hs a day.
> 
> Thanks for any suggestions that you may have.
> Regards.

Does any of the following make any sense?

| 04/20/06 17:15:49 Browsing http://200.40.239.182
| Fetching http://200.40.239.182/ ...
| GET / HTTP/1.1
| Host: 200.40.239.182
| Connection: close
| Referer: http://www.grc.com
| User-Agent: Sam Spade 1.14

| HTTP/1.1 401 Unauthorized
| Server: httpd-impacct/1.10 10/2003
| Content-type: text/h7ml
| Connection: close
| Cache-Control: no-cache
| Content-length: 65535
| WWW-Authenticate: Basic realm="Web manager"

| {H7ML}{HEAD}{TITLE}401 Unauthorized</TITLE>{/HEAD}
| {BODY BGCOLOR="#cc9999"}{H2>401 Unauthorized{/H2}
| Authorization required for the URL '/'.
| {HR}
| %{/H7ML}

A Google on 'httpd-impacct' was fruitless:

http://www.google.com/search?q=httpd-impacct

-- 
Norman
~Oh Lord, why have you come
~To Konnyu, with the Lion and the Drum
0
Norman
4/21/2006 12:25:57 AM
Reply:

Similar Artilces:

Internet works, pauses, then works again
So I made the switch to OpenSuSE from Ubuntu about....3 days ago, so everything is new to me again, specially KDE 3.5.9. Well I noticed today while browsing the web that when I'm wired or wireless the internet works fine for a while, then seems to pause and doesn't load websites then all of a sudden it works great again.:eek: Not a huge deal, but kinda annoying. Anyone have any ideas? -- CCBalla10 ------------------------------------------------------------------------ Is it possible that this is non-network related, such as a scheduled job happening at the t...

Internet working. Package management not working
Hello all, I use an internet connection with a proxy. I have set the proxy in Firefox and systemsettings so now I can browse the web and I can ping Google from Console. But when I start Software Management, it says "Cannot access installation media". Whats wrong? -- wirate ------------------------------------------------------------------------ Did you setup the proxy on YaST2? Network Serveces -> Proxy -- VampirD Microsoft Windows is like air conditioning Stops working when you open a window. ------------------------------------------------------...

online Update not working, internet works
Hi there! I'm very new to Linux. I tried to set up my internet connection using the network manager and not the classic iufp method. At first it just didn't work but after deactivating IPv6 I got it working: firefox can connect to the internet. What troubles me is the online update with Update Applet. The following message pops up: "Error: packageKit error repo-not-available: Failed to download /media from http://download.opensuse.org/distribution/11.2/repo/oss/" Also when I go to Yast->Software->Software repositories I get the msg: Systemadministration i...

Internet not working in browser, but connection is working
Hello all, i'm new in the linux field, but i decided to give it a try and install it. I have installed fedora 10 first, but i had the same problem, and i wasn't very happy with that version. So today i downloaded openSUSE 11.1 and after installing i noticed i have the same problem. The wire connection is active, the ping from the console is working, i have pinged the router i'm connected to and google. it's working. from the browser i am able to connect to the router interface, but i'm not able to access any webpage. i have runed a ifconfig, this is what i get : ...

URL not working, but does work in Internet Explorer
Name: GS Email: thisismegsatgmaildotcom Product: Firefox Summary: URL not working, but does work in Internet Explorer Comments: Hello, I thought that you might like to know that there is something wrong with FireFox. Just in case it was something wrong with your older version, I upgraded to 3.6 and I still have the same problem. When I go to http://maps.msn.com/%28pmlv1y3qffykjeuw3r0ycr55%29/home.aspx?&redirect=false and pull up directions, I can not expand the map to its full size (there are 3 squares above the map that when clicked on, give you a larger map.). Wh...

URL not working, but does work in Internet Explorer #2
Name: GS Email: thisismegsatgmaildotcom Product: Firefox Summary: URL not working, but does work in Internet Explorer Comments: Hello, I just sent this e-mail to you via your web page. The feed back page I received told me that I had to BCC you if I expected to get a response. Where on your web page is there a place to BCC anyone? I do not have time to play games like this. A response would be greatly appreciated!!!!! I thought that you might like to know that there is something wrong with FireFox. Just in case it was something wrong with your older version, I upgrad...

Images work fine with while debugging but do not work on Internet
Dear Forum, I have a simple problem that plagues my website. Every time I want to put in an image I can't get it to display on the internet. It looks fine on the Intranent and I believe the files are in the right spot any ideas? I am using VWD, and VB code. IO have tried jpeg, gif, and all sorts of other images and still nothing.   Thank You, TIM  Did you reference the images correctly? Do your images display if you open the path which is specified in <img src="path" /> ??? You can use the Tilde-Operator for application realtive pa...

Mouse-over does not work in Firefox, but works in Internet Explorer
Name: Michel Lambert Email: michel_lambertatgmxdotnet Product: Firefox Summary: Mouse-over does not work in Firefox, but works in Internet Explorer Comments: Hello Hendrix, I was visiting the http://www.aeg.de/index_e.html Website with my browser Firefox 1.5, and noticed that I was not able to go further then the Start Page. None of the link seemed to work. I updated to Firefox 2.0, but the result is the same. With my Internet Explorer 6.0, and noticed that the mouse-over links on the startpage make a submenu to appear. That submenu does not show up in Firefox. C...

Hyperlink is working in Internet Explorer but not working in Mozilla Firefox
 Hey Everybody,      i am developing website in ASO.Net and i am using Hyperlink Control in this website but those hyperlink doesn't work in Firefox.My code is: <table border="0" width="1000px">            <tr>                <td style="height:20px" align="left">                    <...

Work Friendly: How Not to Get Fired for Internet Surfing at Work ?
[quote] Your boss is waiting for that important project report but you feel more interested in reading that story on CNN website about Harry Potter star Daniel Radcliffe who decided to strip off his robes and glasses for a stage show. Thanks to an earlier ruling that surfing the Web to reading a newspaper or talking on the phone, you may not get fired for web sufing but it will definitely cause you a huge embarrassment when the supervisor walks into your cabin to check the progress. Oops, you didn't even had that Microsoft Word program running on your computer. If you also fa...

Working
I have two servers running NW65sp4A (different trees). I initially installed BM3.8 patched to sp4 with VPN services ( Firewall services to follow after I know I have VPN working). My problem is that it appears to be working but its not working. I can open my Windows Explorer (from the SLAVE side network) and reach the MASTER, authenticate and open files. The MASTER NRM VPN monitor shows 1 (one) Active Connections 0 (zero) Packets Received and lots of Packets Sent. The VPN Member List Status shows both servers as �Being Configured�. The Audit Log has two recurring RED entrie...

internet not working
*I am new to linux . I had opensuse 10.3 before this opensuse 11. I am have a problem that on system tray it shows that wire network got connected but when i run firefox than it wont work. means no access to internet .i don't know what is problem . please help me. i have DSL.* -- cancertropica ------------------------------------------------------------------------ You say that in the KDE desktop you have internet, but FireFox is oblivious of it. In order to rule out some issues you can try: 0. try using konqueror. 1. go into a terminal and issue the following...

The hotmail full version is not working on molliza but is working on Internet Exploer.
Name: Zach Staback Email: coolkid2219athotmaildotcom Product: Firefox Release Candidate Summary: The hotmail full version is not working on molliza but is working on Internet Exploer. Comments: Says to delete cache and cookies and still doesn't work. Browser Details: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9) Gecko/2008051206 Firefox/3.0 From URL: http://hendrix.mozilla.org/ ...

openSuse 11.3: internet stopped working (was working fine)
Hi, I installed OS 11.3; was working fine with Internet since yesterdad; I have been having problems with my ISP / DSL; the cablemodem went down several times yesterday. Yet, when it begun to work, the PC could not have access to internet any more, not even to the Thompson web config page (192.168.1.254). I setup an old laptop with Win XP and it could access Internet; following some posts here, I deleted the eth0 configuration in Yast, and have it creted again... didn't work. Any help please? -- alquimista ---------------------------------------------------------------...

Web resources about - Working on the Internet! - grc.shieldsup

Internet - Wikipedia, the free encyclopedia
The Internet is a global system of interconnected computer networks that use the standard Internet protocol suite (TCP/IP) to link several billion ...

Internet - Wikipedia, the free encyclopedia
The Internet is a global system of interconnected computer networks that use the standard Internet protocol suite (TCP/IP) to link several billion ...

Internet - Wikipedia, the free encyclopedia
... government networks of local to global scope, linked by a broad array of electronic, wireless, and optical networking technologies. The Internet ...

Internets - Wikipedia, the free encyclopedia
" Internets ", also known as " The Internets ", is a Bushism -turned- catchphrase used humorously to portray the speaker as ignorant about the ...

Internet Evolution - The Macrosite for News, Analysis, and Opinion about the Future of the Internet
The next big leap forward in the history of the Internet is happening now: Internet Evolution (www.internetevolution.com) is a Web 2.0 online ...

The most hated people on the internet in 2015: where are they now?
Scarcely a month went by in 2015 without the christening of some new 'most hated' person: whether 'pharmabro' Martin Shrelki or cancer-faking ...

Internet.org Free Basics Has Support in India
A survey of more than 3,000 people in India found that 86 percent of respondents supported Internet.org’s Free Basics offerings, while 80 percent ...

The Internet is freaking out about this panda snowman puzzle on Facebook
It’s almost Christmas, which means the Internet is practically littered with winter-themed digital decorations and memes intended to go viral. ...

India is temporarily banning Facebook's plan to provide free internet to the developing world
Facebook's plan to provide free internet to the developing world just hit another hurdle: The Indian regulator is ordering a temporary ban on ...

Can you spot the panda? The latest Internet obsession
Not since #TheDress has a picture driven the Internet so crazy

Resources last updated: 12/25/2015 2:25:20 PM