[ale] Alternative port to 80 for web server

[Geoffrey]

Mike Millson wrote:
> David,
> 
> Actually I'm doing that already, but now I would like to open up my website
> for clients to view. I figured I would use an obscure port number so that
> not just anyone (and all the NIMBA and code red requests) can get in. I was
> thinking it would be more secure. I'm going to set it up so all outside tcp
> traffic is dropped unless it is going to my obscure port number.

I wouldn't consider that providing any security, just slowing down a 
hack attempt ( for (i=STARTPORT; i<=MAXPORT; i++) { attempt http get 
code goes here })

> 
> Thank you,
> Mike
> 
> -----Original Message-----
> From: David Bronson [mailto:dbron at roman.net]
> Sent: Thursday, February 07, 2002 10:55 AM
> To: mgm at atsga.com; 'ALE'
> Subject: RE: [ale] Alternative port to 80 for web server
> 
> 
> What I do is set it up to use port 80 but use iptables to drop all
> traffic other than from my ip.
> 
> Hope that helps,
> 
> David
> 
> -----Original Message-----
> From: Mike Millson [mailto:mgm at atsga.com]
> Sent: Thursday, February 07, 2002 10:27 AM
> To: ALE
> Subject: [ale] Alternative port to 80 for web server
> 
> I would like to run my Apache web server for testing purposes. To avoid
> port
> scans looking for web servers and other undue attention, I would like to
> run
> it on a port other than 80. Any guidance for picking that other port
> number
> or any other suggestions?
> 
> Thank you,
> Mike
> 
> 
> ---
> This message has been sent through the ALE general discussion list.
> See http://www.ale.org/mailing-lists.shtml for more info. Problems
> should be
> sent to listmaster at ale dot org.
> 
> 
> 
> 
> 
> ---
> This message has been sent through the ALE general discussion list.
> See http://www.ale.org/mailing-lists.shtml for more info. Problems should be
> sent to listmaster at ale dot org.
> 
> 
> 
> ---
> This message has been sent through the ALE general discussion list.
> See http://www.ale.org/mailing-lists.shtml for more info. Problems should be 
> sent to listmaster at ale dot org.
> 
> 
> 


-- 
Until later: Geoffrey		esoteric at 3times25.net

"...the system (Microsoft passport) carries significant risks to users that
are not made adequately clear in the technical documentation available."
- David P. Kormann and Aviel D. Rubin, AT&T Labs - Research
- http://www.avirubin.com/passport.html


---
This message has been sent through the ALE general discussion list.
See http://www.ale.org/mailing-lists.shtml for more info. Problems should be 
sent to listmaster at ale dot org.