In-Reply-To: 
From: Andy Willis 
@X-Yahoo-Profile: abwillis1
@Mime-Version: 1.0
@Mailing-List: list os2user{at}yahoogroups.com; contact os2user-owner{at}yahoogroups.com
@Delivered-To: mailing list os2user{at}yahoogroups.com
@Precedence: bulk
@List-Unsubscribe: 
@Date: Tue, 14 Oct 2003 20:53:32 -0600
Subject: Re: Port Scanner
Reply-To: os2user{at}yahoogroups.com
@Content-Type: text/plain; charset=ISO-8859-1
@Content-Transfer-Encoding: 7bit


Mike O'Connor wrote:

>[previously posted 24 May 2003 - no response sighted]
>
>Andy Willis wrote:
>
>  
>
>>Hi Maynard, Alan,
>>
>>    
>>
>>>just using Injoy Dialler 2.3 or 3.0 Beta with NAT enabled gives a 
>>>STEALTH response from grc.com on port 139. [May be because of IBM TCP/IP 
>>>4.1+ built-in FW?]
>>>
>>>      
>>>
>>Actually I get stealth from grc.com on port 139 without any firewall 
>>running.  If you don't have netbios over tcpip installed you will.  If I 
>>turn on the built in firewall then I get stealth on all the ports.
>>Andy
>>
>>    
>>
>Hi Andy,
>Can you explain for those of us who don't know, just how one turns on
>the in-built firewall?
>Thanks.
>
>  
>
I user zampa, http://www.mo.himolde.no/~ltning/os2/ > to set it up 
myself.  There is another program that I know of but can't remember the 
name right now.  There is a way to do it manually but I don't know the 
command to turn it on.  Zampa will create the rules as well as allow you 
to turn it on and off. 
\mptn\etc\security\fwfilters.cnf is the file that holds the rules.
and here is an example of some rules in that file:
permit 9.17.57.109 255.255.255.255 0.0.0.0 0.0.0.0 all any 0 any 0 both 
local outbound l=no f=no
permit 0.0.0.0 0.0.0.0 9.17.57.109 255.255.255.255 tcp/ack any 0 any 0 
both local inbound l=no f=no
permit 0.0.0.0 0.0.0.0 9.17.57.109 255.255.255.255 icmp eq 0 any 0 both 
local inbound l=no f=no
permit 0.0.0.0 0.0.0.0 9.17.57.109 255.255.255.255 udp eq 53 any 0 both 
local inbound l=no f=no
permit 0.0.0.0 0.0.0.0 9.17.57.109 255.255.255.255 tcp eq 53 any 0 both 
local inbound l=no f=no
There are some webpages available that give more detail on it actual 
workings but I don't know them off the top of my head.
Andy





------------------------ Yahoo! Groups Sponsor ---------------------~-->
Buy Ink Cartridges or Refill Kits for your HP, Epson, Canon or Lexmark
Printer at MyInks.com. Free s/h on orders $50 or more to the US & Canada.
http://www.c1tracking.com/l.asp?cid=5511
http://us.click.yahoo.com/mOAaAA/3exGAA/qnsNAA/E8folB/TM
---------------------------------------------------------------------~->

To unsubscribe from this group, send an email to:
os2user-unsubscribe{at}yahoogroups.com

 

Your use of Yahoo! Groups is subject to http://docs.yahoo.com/info/terms/ 



---