open port 110

concerned · Guest

Benign is holding open port 110. This is enough of a concern for me not to use this otherwise excellent bit of software. For a full explanation care of grc.com go to
http://grc.com/faq-shieldsup.htm#NAV2K

Paul · Admin Joined: Feb 22, 2002 Posts: 5719 Location: USA

The ideal solution is to hold the port open locally and not on the public interface. Did you scan your system using our tools to determine if port 110 is open?

And if its open, is it so because you haven't locked it down in your firewall?

Aart · Guest

Wayward · Posted: Tue Mar 18, 2003 5:01 pm Post subject:

Paul and Concerned ...

I just used the Gibson Research Shields Up program to confirm that Benign does seem to hold the POP3 Port 110 open. http://grc.com/

I use AVG Anti-Virus with the AVG Personal E-Mail Scanner. With that configuration the port is closed. When B9 is added to the mix, the port is open. I'm no expert, but it doesn't seem like a good thing ...

Commnets / thoughts welcome.

Paul · Admin Joined: Feb 22, 2002 Posts: 5719 Location: USA

Just as a sanity check use our online nmap scanner.

core · Guest

Try actually connecting to it from an external IP address - it prints this message:

-ERR Connections are allowed only from the local host (xxx.xxx.xxx.xxx is not a local address)
Connection closed by foreign host.

So the port seems to be open but B9 drops the connection - so it's safe.

Barru · Posted: Tue Mar 18, 2003 5:27 pm Post subject:

I've got Benign running on port 110 and it doesn't show up in either Gibson's port scan or the port scan on this site. I'm using WinProxy, which was a pain to get configured correctly, but seems to do a good job running my computer in stealth mode and works great to share my network connection now that it's configured.

Paul · Admin Joined: Feb 22, 2002 Posts: 5719 Location: USA

Thanks Barru, that's what I was hoping for. So it seems concerned's firewall configuration isn't proper. I'm getting a copy of B9 & MW this week, so I'll be able to start helping out more with both.

troy16d · Guest

here is the result I got from sheilds up

110
POP3
Stealth! There is NO EVIDENCE WHATSOEVER that a port (or even any computer) exists at this IP address!

With Benign running

saddadbadhad · Cadet Joined: Mar 18, 2003 Posts: 2 Location: UK

Open and safe??? I'm not so sure. If port 110 appears to be open then its visible and therefore vulnerable. I've tried different rules with local and remote ports - I'm using Sygate personal Firewall. Using GRC Shields Up, UDP port scanner or nmap port scanner I get the same results: port 110 is open!
As for configuring firewalls - I thought Benign was

Paul · Admin Joined: Feb 22, 2002 Posts: 5719 Location: USA

The question is why are some folks able to stealth it and not others?

stevek · Guest

So what is everyone saying...!!! That B9 should only be run while you are actually dealing with e-mails, then should be closed down...??????

troy16d · Guest

Maybe it's the OS I'm running Win XP Pro all of my ports are showing stealh on sheilds up

Paul · Admin Joined: Feb 22, 2002 Posts: 5719 Location: USA

saddadbadhad · Cadet Joined: Mar 18, 2003 Posts: 2 Location: UK

I've now managed to configure my firewall properly!!!

Now I get "stealthed" results on port 110. I simply (after a good nights sleep!) went to Sygates web site and read the instructions. Hmmm...


	Home ˇ Topics ˇ Submit News ˇ Top 10 This entire site, Cops Themes, and Computer Cops are Š 2002 - 2004 Computer Cops, LLC. All rights reserved. You can syndicate our news using the file RSS 0.91, ultramode.txt, or RSS 1.0. Acceptable Use Policy. Use signifies your agreement. Engine Copyright Š 2002 by PHP-Nuke, GNU/GPL Licensed. ICRA Member. Paul Laudanski, Member of Computer Cops, LLC Server Load: 1538 pages served in previous 5 minutes. Page Rendered: 2.079 seconds.