Ports allocation for ISPCP

[Nomis]

I have just completed Debian 4 installation and want to install ispCP on it. But before I do that I want to close all ports that are not needed.

I want the system to preform the following tasks.
Host Domains
Send and receive mail to these domains.
Allow the user to update his domain via FTP
Have remote access to there mail via a web interface
Load Spam Assassin and Anti virus.

So where can I get a list of ports that ispCP uses to perform these task's so that all unnecessary ports can be closed to prevent the system from attacks.

Thanking you in advance for your assistance.

[rbtux]

on linux only ports actually services runs on are open for the world...

so you won't need to "close" any ports...

[Nomis]

Thanks for the update, so can I get a list of the services then please.

[BeNe]

Port 21 (FTP)
Port 25 (SMTP)
Port 53 (DNS)
Port 80 for Apache (SSL 443 if needed)
Port 110 (POP3)
Port 143 (IMAP)
465 (SMTPs)
993 (IMAPs)
995 (POP3s)

Rest should be bind to localhost and not to your IP.

Greez BeNe

[RodNoc]

(02-19-2009 04:38 PM)BeNe Wrote:  Port 21 (FTP)
Port 25 (SMTP)
Port 53 (DNS)
Port 80 for Apache (SSL 443 if needed)
Port 110 (POP3)
Port 143 (IMAP)
465 (SMTPs)
993 (IMAPs)
995 (POP3s)

Rest should be bind to localhost and not to your IP.

Greez BeNe

FTP has 2 ports: 20 and 21 (Data and Control)
And don't close your SSH-Port (22), because you need it to administrate your Server
And you also need the high-ports for the connections, because of the dynamic ports (Correct me, if this is wrong)

Regards
Dom

[BeNe]

Quote:FTP has 2 ports: 20 and 21 (Data and Control)

Right, i missed that point before - sorry!

Quote:And don't close your SSH-Port (22), because you need it to administrate your Server

Best would be if you move SSH to an other Port and close 22.
So you are not a victim of the default scans.

Quote:And you also need the high-ports for the connections, because of the dynamic ports (Correct me, if this is wrong)

Yeah, Proftpd use such Ports. You can set a range for the passive Ports in the Config and also open them in your FW Rule.

Greez BeNe

[RodNoc]

(02-19-2009 06:48 PM)BeNe Wrote:  Best would be if you move SSH to an other Port and close 22.

No best would be, if he uses openVPN and only open the VPN-Port for outside and SSH for his openVPN-IP

[BeNe]

I know! Use use exactly this Version on my Server
But if a Member ask me about what Ports ispCP needs, i´m not really sure if the knowlegde is enough for such a solution. So in his case the Port change is more simple and he does a little bit for the Servers securtiy.

Greez BeNe

[Nomis]

Thanks guys.

This give me a great foundation to start from. Moving from Windows world to Linux so need all the help I can get.


And again many thanks