Jan. 27th, 2006
well, that's annoying.
Jan. 27th, 2006 09:31 pmWhen I "upgraded" the flash rom in my router, the upgrade cautioned that I'd need to do a factory reset (thus losing all my configuration), but it seemed to be working okay without one. I should've payed more attention, since this is what nmap currently says about my server:
Of course, enabling the firewall seems to cause problems too (details obscured):
PORT STATE SERVICE 22/tcp open ssh 25/tcp open smtp 53/tcp open domain 80/tcp open http 110/tcp open pop3 111/tcp open rpcbind 139/tcp open netbios-ssn 143/tcp open imap 199/tcp open smux 443/tcp open https 445/tcp open microsoft-ds 783/tcp open spamassassin 993/tcp open imaps 995/tcp open pop3s 2401/tcp open cvspserver 3128/tcp open squid-http 3306/tcp open mysql 8080/tcp open http-proxyApparently when it says, "SPI Firewall Not Enabled!" it means, "dude, your ass is showing". Thankfully, I'm sufficiently paranoid about this sort of thing that I was running tcp_wrappers on the box, and most services are configured to refuse to have anything to do with traffic originating outside my network. I'm still annoyed, though.
Of course, enabling the firewall seems to cause problems too (details obscured):
Looking up www.example.com.. --- Connecting to example.com (127.0.0.1) port 6670.. --- Connection failed. Error: (336130315) error:1408F10B:SSL routines:SSL3_GET_RECORD:wrong version number Are you sure this is a SSL capable server and port?That's supposed to be an IRC connection. GAH.