返回
-
标题
Are these ports necessary and are they accessible from outside SPS. -
说明
Any pentest team that wants to confirm that the port below is listening and cannot be accessed from outside/external network.
tcp 0 0 0.0.0.0:10090 0.0.0.0:* LISTEN 7859/python3
tcp 0 0 0.0.0.0:111 0.0.0.0:* LISTEN 2528/rpcbind
tcp 0 0 0.0.0.0:1514 0.0.0.0:* LISTEN 31590/syslog-ng
tcp 0 0 0.0.0.0:25672 0.0.0.0:* LISTEN 8593/beam.smp
tcp 0 0 0.0.0.0:38303 0.0.0.0:* LISTEN -
tcp 0 0 0.0.0.0:420 0.0.0.0:* LISTEN 2627/uwsgi
tcp 0 0 0.0.0.0:4369 0.0.0.0:* LISTEN 8899/epmd
tcp 0 0 0.0.0.0:5010 0.0.0.0:* LISTEN 7021/uwsgi
tcp 0 0 0.0.0.0:5432 0.0.0.0:* LISTEN 7064/postgres
tcp 0 0 0.0.0.0:59075 0.0.0.0:* LISTEN 26304/rpc.statd
tcp 0 0 0.0.0.0:8000 0.0.0.0:* LISTEN 2958/python -
解决办法
All those ports are necessary and none of them is accessible from outside of SPS. Hence it is secure to have them remain open and listening. If the customer is exceedingly concerned, they will have to filter their traffic to prevent unwanted traffic from flowing towards SPS.