<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 TRANSITIONAL//EN">
<HTML>
<HEAD>
<META HTTP-EQUIV="Content-Type" CONTENT="text/html; CHARSET=UTF-8">
<META NAME="GENERATOR" CONTENT="GtkHTML/3.6.2">
</HEAD>
<BODY>
On Sun, 2006-03-19 at 13:06 -0500, Ansar Mohammed wrote:
<BLOCKQUOTE TYPE=CITE>
<PRE>
<FONT COLOR="#000000">netstat -an</FONT>
</PRE>
</BLOCKQUOTE>
<PRE>
</PRE>
Actually, my guess is:<BR>
<BR>
apache TCP 80, TCP 443 (if SSL is used)<BR>
Postfix TCP 25 (possible TCP 587 and TCP 465 too)<BR>
Mailman (uses apache and postfix ports)<BR>
mambo (use apache)<BR>
DNS (UDP 53, TCP 53 (if you have an external host being secondary))<BR>
MySQL TCP 3306 (but you don't need to expose it if only the web server uses it)<BR>
<BR>
<BLOCKQUOTE TYPE=CITE>
<PRE>
<FONT COLOR="#000000">> -----Original Message-----</FONT>
<FONT COLOR="#000000">> From: <A HREF="mailto:owner-tlug-lxSQFCZeNF4@public.gmane.org">owner-tlug-lxSQFCZeNF4@public.gmane.org</A> [mailto:<A HREF="mailto:owner-tlug-lxSQFCZeNF4@public.gmane.org">owner-tlug@ss.org</A>] On Behalf Of Robert F.</FONT>
<FONT COLOR="#000000">> Kennedy</FONT>
<FONT COLOR="#000000">> Sent: March 19, 2006 4:30 AM</FONT>
<FONT COLOR="#000000">> To: <A HREF="mailto:tlug-lxSQFCZeNF4@public.gmane.org">tlug-lxSQFCZeNF4@public.gmane.org</A></FONT>
<FONT COLOR="#000000">> Subject: RE: [TLUG]: Running two servers inside network</FONT>
<FONT COLOR="#000000">> </FONT>
<FONT COLOR="#000000">> Hi John,</FONT>
<FONT COLOR="#000000">> </FONT>
<FONT COLOR="#000000">> That is a good idea, I'll change the IP instead. The reason I've used DMZ</FONT>
<FONT COLOR="#000000">> is</FONT>
<FONT COLOR="#000000">> that I don't know which ports are required for the various services. Is</FONT>
<FONT COLOR="#000000">> there a way of finding out? I'm running Apache, Postfix, Mailman, Mambo</FONT>
<FONT COLOR="#000000">> (PHP, MySQL), and DNS.</FONT>
<FONT COLOR="#000000">> </FONT>
<FONT COLOR="#000000">> Thanks,</FONT>
<FONT COLOR="#000000">> Robert</FONT>
<FONT COLOR="#000000">> </FONT>
<FONT COLOR="#000000">> </FONT>
<FONT COLOR="#000000">> Toronto</FONT>
<FONT COLOR="#000000">> </FONT>
<FONT COLOR="#000000">> -----Original Message-----</FONT>
<FONT COLOR="#000000">> From: <A HREF="mailto:owner-tlug-lxSQFCZeNF4@public.gmane.org">owner-tlug-lxSQFCZeNF4@public.gmane.org</A> [mailto:<A HREF="mailto:owner-tlug-lxSQFCZeNF4@public.gmane.org">owner-tlug@ss.org</A>] On Behalf Of</FONT>
<FONT COLOR="#000000">> <A HREF="mailto:john-Da48MpWaEp0CzWx7n4ubxQ@public.gmane.org">john@netdirect.ca</A></FONT>
<FONT COLOR="#000000">> Sent: March 18, 2006 2:32 PM</FONT>
<FONT COLOR="#000000">> To: <A HREF="mailto:tlug-lxSQFCZeNF4@public.gmane.org">tlug-lxSQFCZeNF4@public.gmane.org</A></FONT>
<FONT COLOR="#000000">> Subject: Re: [TLUG]: Running two servers inside network</FONT>
<FONT COLOR="#000000">> </FONT>
<FONT COLOR="#000000">> > A few weeks ago my RH9 server got infected with a virus through PHP</FONT>
<FONT COLOR="#000000">> > and was doing DoS attacks on Google (a Microsoft virus perhaps) and</FONT>
<FONT COLOR="#000000">> > Jason, Tim, Peter, Eric and Neil suggested that I scrap the old server</FONT>
<FONT COLOR="#000000">> > and start fresh.</FONT>
<FONT COLOR="#000000">> > I am just getting around to that task now. I have a new machine with</FONT>
<FONT COLOR="#000000">> > CentOS installed (thanks to another TLUG member I enjoyed beer with</FONT>
<FONT COLOR="#000000">> > last Tuesday night but whose name I've forgotten). This is an</FONT>
<FONT COLOR="#000000">> > excellent upgrade path for someone running RH9.</FONT>
<FONT COLOR="#000000">> ></FONT>
<FONT COLOR="#000000">> > To test the new machine I went into my WRT54G Linksys router and</FONT>
<FONT COLOR="#000000">> > changed the DMZ from 192.168.2.39 (old machine) to 192.168.2.55 (new</FONT>
<FONT COLOR="#000000">> > machine). Did my testing late at night but when I set the DMZ back to</FONT>
<FONT COLOR="#000000">> > the old machine it stopped working. This gave me quite a scare</FONT>
<FONT COLOR="#000000">> > because by looking at logs and so on it should have been working.</FONT>
<FONT COLOR="#000000">> > Zonked I went to sleep and when I got up this morning it just started</FONT>
<FONT COLOR="#000000">> > working again around 11:30AM. I have no idea why it stopped working</FONT>
<FONT COLOR="#000000">> > for about ten hours but I am looking for advice on how I can switch</FONT>
<FONT COLOR="#000000">> > back and forth without encountering this problem.</FONT>
<FONT COLOR="#000000">> </FONT>
<FONT COLOR="#000000">> It sounds like a Linksys problem. I don't recommend using the DMZ option</FONT>
<FONT COLOR="#000000">> if</FONT>
<FONT COLOR="#000000">> you don't have to, this may have helped the hackers on your old system.</FONT>
<FONT COLOR="#000000">> I recommend that you only open the ports that you need to. Depending on</FONT>
<FONT COLOR="#000000">> your</FONT>
<FONT COLOR="#000000">> firmware, this can be done in Applications and Gaming.</FONT>
<FONT COLOR="#000000">> </FONT>
<FONT COLOR="#000000">> Instead of changing the firewall to point to a new IP address you can swap</FONT>
<FONT COLOR="#000000">> the addresses on the servers.</FONT>
<FONT COLOR="#000000">> --</FONT>
<FONT COLOR="#000000">> The Toronto Linux Users Group. Meetings: <A HREF="http://tlug.ss.org">http://tlug.ss.org</A></FONT>
<FONT COLOR="#000000">> TLUG requests: Linux topics, No HTML, wrap text below 80 columns How to</FONT>
<FONT COLOR="#000000">> UNSUBSCRIBE: <A HREF="http://tlug.ss.org/subscribe.shtml">http://tlug.ss.org/subscribe.shtml</A></FONT>
<FONT COLOR="#000000">> --</FONT>
<FONT COLOR="#000000">> The Toronto Linux Users Group. Meetings: <A HREF="http://tlug.ss.org">http://tlug.ss.org</A></FONT>
<FONT COLOR="#000000">> TLUG requests: Linux topics, No HTML, wrap text below 80 columns</FONT>
<FONT COLOR="#000000">> How to UNSUBSCRIBE: <A HREF="http://tlug.ss.org/subscribe.shtml">http://tlug.ss.org/subscribe.shtml</A></FONT>
<FONT COLOR="#000000">--</FONT>
<FONT COLOR="#000000">The Toronto Linux Users Group. Meetings: <A HREF="http://tlug.ss.org">http://tlug.ss.org</A></FONT>
<FONT COLOR="#000000">TLUG requests: Linux topics, No HTML, wrap text below 80 columns</FONT>
<FONT COLOR="#000000">How to UNSUBSCRIBE: <A HREF="http://tlug.ss.org/subscribe.shtml">http://tlug.ss.org/subscribe.shtml</A></FONT>
</PRE>
</BLOCKQUOTE>
<TABLE CELLSPACING="0" CELLPADDING="0" WIDTH="100%">
<TR>
<TD>
-- <BR>
<TABLE CELLSPACING="0" WIDTH="500">
<TR>
<TD>
<B>John Van Ostrand</B>
</TD>
<TD ALIGN="right">
<B>Net Direct Inc.</B>
</TD>
<TD>
</TD>
</TR>
<TR>
<TD VALIGN="top">
<I>Director of Technology</I>
</TD>
<TD ALIGN="right">
564 Weber St. N. Unit 12<BR>
Waterloo, ON N2L 5C6
</TD>
<TD VALIGN="top">
<A HREF="http://maps.google.ca/maps?q=Net+Direct+Inc.,+564+Weber+St.+N.+Unit+12,+Waterloo,+ON+N2L+5C6,+canada&ll=43.494599,-80.548222&spn=0.038450,0.073956&iwloc=A&hl=en">map</A>
</TD>
</TR>
<TR>
<TD>
<A HREF="mailto:john-Da48MpWaEp0CzWx7n4ubxQ@public.gmane.org">john-Da48MpWaEp0CzWx7n4ubxQ@public.gmane.org</A>
</TD>
<TD ALIGN="right">
Ph: 519-883-1172
</TD>
<TD>
ext.5102
</TD>
</TR>
<TR>
<TD>
<A HREF="http://www.netdirect.ca">Linux Solutions / IBM Hardware</A>
</TD>
<TD ALIGN="right">
Fx: 519-883-8533
</TD>
<TD>
</TD>
</TR>
</TABLE>
</TD>
</TR>
</TABLE>
</BODY>
</HTML>