Christian Betz on 30 Jun 2009 07:22:22 -0700


[Date Prev] [Date Next] [Thread Prev] [Thread Next] [Date Index] [Thread Index]

Re: [PLUG] Find Open Ports


Are you aware of SSH tunneling/forwarding? It is a great quick and
dirty solution to your problem.

Here is an example which I *just* tested:

I am at work right now. Say I have a service running on port 5984 on
my computer at home (it is an HTTP server). I can access it *through*
port 9867 on my box at work by running the following command to open
an SSH tunnel.

x@xtian:~$ ssh -p 2498 -L 9867:localhost:5984 x@shuxlos.no-ip.org

(note that i use a different port for SSH on my home server, since
this is good practice to prevent script kiddies and the like [actually
that is not even the real port I use!])

I would log in as normal and get a shell, but now SSH creates a tunnel
that I can now point any of my programs running on my work box at (via
port 9867). (downside: the tunnel will close when you log out of the
SSH session).

so, for instance, in my URL bar in firefox (at work) I can then type,:

http://localhost:9867/

And it will actually be routed through to port 5984 on my box at home.

This is all using only a single SSH port (2498 in this case). Did I
mention you get encryption for free?

This is technique is extremely useful. Note: You can actually forward
a port to any machine on the remote network (not just localhost). You
can even forward ports the other way, allowing you to pretend to host
a service on a remote network (the options are slightly different, but
the idea is the same). You can even do it in windows with putty.

Christian

On Mon, Jun 29, 2009 at 9:30 PM, <plug-request@lists.phillylinux.org> wrote:
> Send plug mailing list submissions to
>        plug@lists.phillylinux.org
>
> To subscribe or unsubscribe via the World Wide Web, visit
>        http://lists.netisland.net/mailman/listinfo/plug
> or, via email, send a message with subject or body 'help' to
>        plug-request@lists.phillylinux.org
>
> You can reach the person managing the list at
>        plug-owner@lists.phillylinux.org
>
> When replying, please edit your Subject line so it is more specific
> than "Re: Contents of plug digest..."
>
>
> Today's Topics:
>
>   1. Open-Source Development (Marc Spiron)
>   2. Tcl for Drooling Idiots (jeff)
>   3. Re: Tcl for Drooling Idiots (Walt Mankowski)
>   4. Find Open Ports (Casey Bralla)
>   5. Source-Based Distribution Recommendation (Casey Bralla)
>   6. Re: Tcl for Drooling Idiots (K.S. Bhaskar)
>   7. Re: Source-Based Distribution Recommendation (Jonathan DeMasi)
>   8. Re: Find Open Ports (Ugarit Ebla)
>   9. Re: Find Open Ports (Michael Lazin)
>
>
> ----------------------------------------------------------------------
>
> Message: 1
> Date: Mon, 29 Jun 2009 17:07:05 -0400
> From: Marc Spiron <marc@ehcmi.com>
> Subject: [PLUG] Open-Source Development
> To: plug@lists.phillylinux.org
> Message-ID: <1246309625.3435.1275.camel@marc-desktop>
> Content-Type: text/plain
>
> Good evening,
>
> Hope everyone is enjoying their Monday so far...I am reaching out to the
> group regarding a project/opportunity I currently have available in the
> open-source development space.  I was hoping someone could help point me
> in a direction of a company, colleague, or friend that may have this
> background.
>
> If you are currently working with a recruiter here and are interested,
> please feel free to inquire, but if not, you can reach out directly to
> me.  This position is for a client in Philly that has an interesting
> project underway and needs someone with experience in Ruby on Rails, but
> also open source development in general (Java, Python, Unix, etc.).
> Experience with JVM, Objective C, Erlang, Cloud Computing are all great
> to have, but not required!
>
> Please feel free to reach out to me if your background matches up or
> pass this along to someone more appropriate.
>
> Thanks you for your time!
>
> Marc Spiron
> Human Capital Management, Inc.
> p. 610.230.0255
> www.icn-i.com
> marc@ehcmi.com
> www.linkedin.com/in/mspiron
>
>
>
> ------------------------------
>
> Message: 2
> Date: Mon, 29 Jun 2009 18:04:20 -0400
> From: jeff <jeffv@op.net>
> Subject: [PLUG] Tcl for Drooling Idiots
> To: Philadelphia Linux User's Group Discussion List
>        <plug@lists.phillylinux.org>
> Message-ID: <4A493A64.6020105@op.net>
> Content-Type: text/plain; charset=ISO-8859-1; format=flowed
>
> In spite of the fact that I should not be allowed anywhere near
> programming, I picked up two programs (scripts?) in Tcl to control
> (radio) scanners.
>
> They don't work too well.
>
> Since they're text files, I made the mistake of looking at them.
> I learn by moving stuff around til I break it completely then give up.
> Is there a decent resource on Tcl for someone who doesn't program/script?
>
>
> Thanks.
>
>
>
> --
> ThermionicEmissions  -  the blog
> http://www.lockergnome.com/leftystrat
>
>
> ------------------------------
>
> Message: 3
> Date: Mon, 29 Jun 2009 20:39:15 -0400
> From: Walt Mankowski <waltman@pobox.com>
> Subject: Re: [PLUG] Tcl for Drooling Idiots
> To: plug@lists.phillylinux.org
> Message-ID: <20090630003915.GC3512@mawode.com>
> Content-Type: text/plain; charset="us-ascii"
>
> On Mon, Jun 29, 2009 at 06:04:20PM -0400, jeff wrote:
>> In spite of the fact that I should not be allowed anywhere near
>> programming, I picked up two programs (scripts?) in Tcl to control
>> (radio) scanners.
>>
>> They don't work too well.
>>
>> Since they're text files, I made the mistake of looking at them.
>> I learn by moving stuff around til I break it completely then give up.
>> Is there a decent resource on Tcl for someone who doesn't program/script?
>
> This looks pretty good:
>
> http://www.tcl.tk/man/tcl8.5/tutorial/tcltutorial.html
>
> Walt
> -------------- next part --------------
> A non-text attachment was scrubbed...
> Name: not available
> Type: application/pgp-signature
> Size: 189 bytes
> Desc: Digital signature
> Url : http://lists.netisland.net/pipermail/plug/attachments/20090629/0490ce22/attachment.pgp
>
> ------------------------------
>
> Message: 4
> Date: Mon, 29 Jun 2009 21:07:17 -0400
> From: Casey Bralla <MailList@nerdworld.org>
> Subject: [PLUG] Find Open Ports
> To: PLUG Philadelphia Linux Users Group <PLUG@lists.phillylinux.org>
> Message-ID: <200906292107.18150.MailList@nerdworld.org>
> Content-Type: Text/Plain;  charset="us-ascii"
>
> My employer is very aggressive in closing off ports.  This makes it hard for me
> to access my home network from work.  Luckily, port 23 is open so I can ssh
> in, and of course, port 80 is left alone.
>
> However, I've got several special web pages that run on computers behind my
> firewall.  I access them through port forwarding to non-standard ports (such as
> 81 & 82).
>
> Unfortunately, since my employer blocks these ports, I can't use them.   I do
> have unlimited discretion, however, in assigning my programs to whatever port
> I desire.
>
> So....  if I knew which ports were NOT blocked, I could use those.
>
> BUT...  How do I check to see if what ports are available?
>
> So far, I've been able to come up with 2 ideas:  1) scan every port, and 2)
> try ports manually one at a time.
>
>
>
> I could run a portscan on my portable, but that would undoubtedly raise all
> kinds of alarms.  Also, I'd have to be sure I was connecting to something that
> had those ports active.
>
>
> Does anybody have any suggestions on how to test to see if a series of ports
> is not filtered, or have a suggestion of ports that I could test manually
> through trial and error?
> --
>
> Casey Bralla
> Chief Nerd in Residence
> The NerdWorld Organisation
>
> http://www.NerdWorld.org
>
>
> ------------------------------
>
> Message: 5
> Date: Mon, 29 Jun 2009 21:21:53 -0400
> From: Casey Bralla <MailList@nerdworld.org>
> Subject: [PLUG] Source-Based Distribution Recommendation
> To: PLUG Philadelphia Linux Users Group <PLUG@lists.phillylinux.org>
> Message-ID: <200906292121.53759.MailList@nerdworld.org>
> Content-Type: Text/Plain;  charset="us-ascii"
>
> I've been a happy Gentoo linux user for several years.  But in the last year
> or so, the quality of the distro seems to have declined quite a bit.
>
> I'm considering switching to another source-based distro and wondering if
> anybody has any experience with:
>
>  - CRUX
>  - Lunar Linux
>  - Sorcerer Linux
>  - SourceMage
> --
>
> Casey Bralla
> Chief Nerd in Residence
> The NerdWorld Organisation
>
> http://www.NerdWorld.org
>
>
> ------------------------------
>
> Message: 6
> Date: Mon, 29 Jun 2009 21:23:24 -0400
> From: "K.S. Bhaskar" <ksbhaskar@gmail.com>
> Subject: Re: [PLUG] Tcl for Drooling Idiots
> To: "Philadelphia Linux User's Group Discussion List"
>        <plug@lists.phillylinux.org>
> Message-ID:
>        <ecef0c6d0906291823l3f648b07m83c1d86080409c40@mail.gmail.com>
> Content-Type: text/plain; charset=ISO-8859-1
>
> There's also an O'Reilly & Associates book:
> http://oreilly.com/catalog/9781565924338
>
> We used Tcl for programming a small application to complete the
> requirements for Computer Merit Badge at BSA Chester County Council's
> science camp at Camp Ware a couple of years ago.
>
> Regards
> -- Bhaskar
>
> On Mon, Jun 29, 2009 at 8:39 PM, Walt Mankowski<waltman@pobox.com> wrote:
>> On Mon, Jun 29, 2009 at 06:04:20PM -0400, jeff wrote:
>>> In spite of the fact that I should not be allowed anywhere near
>>> programming, I picked up two programs (scripts?) in Tcl to control
>>> (radio) scanners.
>>>
>>> They don't work too well.
>>>
>>> Since they're text files, I made the mistake of looking at them.
>>> I learn by moving stuff around til I break it completely then give up.
>>> Is there a decent resource on Tcl for someone who doesn't program/script?
>>
>> This looks pretty good:
>>
>> http://www.tcl.tk/man/tcl8.5/tutorial/tcltutorial.html
>>
>> Walt
>>
>> -----BEGIN PGP SIGNATURE-----
>> Version: GnuPG v1.4.9 (GNU/Linux)
>>
>> iD8DBQFKSV6yXfGeK2entYQRAhWXAJ9HzweYvYc6uSDK8CsjIlH6D23QzQCfXe1W
>> caCMCyphHQUX8SpBSfhBrw0=
>> =EO8o
>> -----END PGP SIGNATURE-----
>>
>> ___________________________________________________________________________
>> Philadelphia Linux Users Group ? ? ? ? -- ? ? ? ?http://www.phillylinux.org
>> Announcements - http://lists.phillylinux.org/mailman/listinfo/plug-announce
>> General Discussion ?-- ? http://lists.phillylinux.org/mailman/listinfo/plug
>>
>>
>
>
> ------------------------------
>
> Message: 7
> Date: Mon, 29 Jun 2009 21:24:26 -0400
> From: Jonathan DeMasi <jrdemasi@gmail.com>
> Subject: Re: [PLUG] Source-Based Distribution Recommendation
> To: "Philadelphia Linux User's Group Discussion List"
>        <plug@lists.phillylinux.org>
> Message-ID:
>        <ab7dac640906291824t1835672fm1bc7936e8ccb40ff@mail.gmail.com>
> Content-Type: text/plain; charset="iso-8859-1"
>
> While I do not have any experience with those distros, I am a new Gentoo
> user of only a few weeks.  I was just curious why feel that the quality of
> the distro has gone down?
>
> On Mon, Jun 29, 2009 at 9:21 PM, Casey Bralla <MailList@nerdworld.org>wrote:
>
>> I've been a happy Gentoo linux user for several years.  But in the last
>> year
>> or so, the quality of the distro seems to have declined quite a bit.
>>
>> I'm considering switching to another source-based distro and wondering if
>> anybody has any experience with:
>>
>>  - CRUX
>>  - Lunar Linux
>>  - Sorcerer Linux
>>  - SourceMage
>> --
>>
>> Casey Bralla
>> Chief Nerd in Residence
>> The NerdWorld Organisation
>>
>> http://www.NerdWorld.org
>> ___________________________________________________________________________
>> Philadelphia Linux Users Group         --
>> http://www.phillylinux.org
>> Announcements -
>> http://lists.phillylinux.org/mailman/listinfo/plug-announce
>> General Discussion  --
>> http://lists.phillylinux.org/mailman/listinfo/plug
>>
> -------------- next part --------------
> An HTML attachment was scrubbed...
> URL: http://lists.netisland.net/pipermail/plug/attachments/20090629/33248baa/attachment.htm
>
> ------------------------------
>
> Message: 8
> Date: Mon, 29 Jun 2009 21:27:29 -0400
> From: Ugarit Ebla <ugaritebla@gmail.com>
> Subject: Re: [PLUG] Find Open Ports
> To: Philadelphia Linux User's Group Discussion List
>        <plug@lists.phillylinux.org>
> Message-ID: <4A496A01.5000103@gmail.com>
> Content-Type: text/plain; charset=ISO-8859-1; format=flowed
>
> nmap
>
> Casey Bralla wrote:
>> My employer is very aggressive in closing off ports.  This makes it hard for me
>> to access my home network from work.  Luckily, port 23 is open so I can ssh
>> in, and of course, port 80 is left alone.
>>
>> However, I've got several special web pages that run on computers behind my
>> firewall.  I access them through port forwarding to non-standard ports (such as
>> 81 & 82).
>>
>> Unfortunately, since my employer blocks these ports, I can't use them.   I do
>> have unlimited discretion, however, in assigning my programs to whatever port
>> I desire.
>>
>> So....  if I knew which ports were NOT blocked, I could use those.
>>
>> BUT...  How do I check to see if what ports are available?
>>
>> So far, I've been able to come up with 2 ideas:  1) scan every port, and 2)
>> try ports manually one at a time.
>>
>>
>>
>> I could run a portscan on my portable, but that would undoubtedly raise all
>> kinds of alarms.  Also, I'd have to be sure I was connecting to something that
>> had those ports active.
>>
>>
>> Does anybody have any suggestions on how to test to see if a series of ports
>> is not filtered, or have a suggestion of ports that I could test manually
>> through trial and error?
>>
>
>
> ------------------------------
>
> Message: 9
> Date: Mon, 29 Jun 2009 21:30:02 -0400
> From: Michael Lazin <microlaser@gmail.com>
> Subject: Re: [PLUG] Find Open Ports
> To: "Philadelphia Linux User's Group Discussion List"
>        <plug@lists.phillylinux.org>
> Message-ID:
>        <6bb38bb80906291830y7124b8bbs2664fed99f7baea1@mail.gmail.com>
> Content-Type: text/plain; charset="iso-8859-1"
>
> If I were you I wouldn't portscan your office network,
>
> Have you considered using http://eyeos.org/
>
> It is a cloud computing desktop that you can install on any webserver,
> written in PHP5
>
> It's not linux, but it has a web browser, and many other apps.  Is port 22
> open at your work?  I thought 23 was the telnet port and port 22 was ssh.  I
> find most anything I want to do can be done with ssh, but if you must have a
> web browser consider eyeos.  I have a copy in a password protected directory
> with the .htaccess chowned to root, because I am a little paranoid.  It's
> something to think about.
>
> Michael
>
> On Mon, Jun 29, 2009 at 9:07 PM, Casey Bralla <MailList@nerdworld.org>wrote:
>
>> My employer is very aggressive in closing off ports.  This makes it hard
>> for me
>> to access my home network from work.  Luckily, port 23 is open so I can ssh
>> in, and of course, port 80 is left alone.
>>
>> However, I've got several special web pages that run on computers behind my
>> firewall.  I access them through port forwarding to non-standard ports
>> (such as
>> 81 & 82).
>>
>> Unfortunately, since my employer blocks these ports, I can't use them.   I
>> do
>> have unlimited discretion, however, in assigning my programs to whatever
>> port
>> I desire.
>>
>> So....  if I knew which ports were NOT blocked, I could use those.
>>
>> BUT...  How do I check to see if what ports are available?
>>
>> So far, I've been able to come up with 2 ideas:  1) scan every port, and 2)
>> try ports manually one at a time.
>>
>>
>>
>> I could run a portscan on my portable, but that would undoubtedly raise all
>> kinds of alarms.  Also, I'd have to be sure I was connecting to something
>> that
>> had those ports active.
>>
>>
>> Does anybody have any suggestions on how to test to see if a series of
>> ports
>> is not filtered, or have a suggestion of ports that I could test manually
>> through trial and error?
>> --
>>
>> Casey Bralla
>> Chief Nerd in Residence
>> The NerdWorld Organisation
>>
>> http://www.NerdWorld.org
>> ___________________________________________________________________________
>> Philadelphia Linux Users Group         --
>> http://www.phillylinux.org
>> Announcements -
>> http://lists.phillylinux.org/mailman/listinfo/plug-announce
>> General Discussion  --
>> http://lists.phillylinux.org/mailman/listinfo/plug
>>
>
>
>
> --
> Michael Lazin
>
> ASCII ribbon campaign ( )
> against HTML e-mail    X
>                                 / \
> -------------- next part --------------
> An HTML attachment was scrubbed...
> URL: http://lists.netisland.net/pipermail/plug/attachments/20090629/12a1b054/attachment.htm
>
> ------------------------------
>
> _______________________________________________
> plug mailing list
> plug@lists.phillylinux.org
> http://lists.netisland.net/mailman/listinfo/plug
>
>
> End of plug Digest, Vol 55, Issue 33
> ************************************
>



-- 
"I'd rather have a bottle in front of me, than a frontal lobotomy." --
Dorothy Parker
___________________________________________________________________________
Philadelphia Linux Users Group         --        http://www.phillylinux.org
Announcements - http://lists.phillylinux.org/mailman/listinfo/plug-announce
General Discussion  --   http://lists.phillylinux.org/mailman/listinfo/plug