Re: Ping: stingray

stingray@xxxxxxxxxxxxxxxx wrote:

well, you can try to setup for example ftp on some remote box, or ask a
friend, make it listen on port 80. Then you try to ftp from your own box
to that ftp on port 80. If it works then most likely the filtering is only
done on ports and not on the contents/protocols.

This would be a very poor test at best. FTP typically requires two ports
to function, and would very likely fail in this scenario, giving false
results if simple port filtering is being used. FTP is absolutely the
worst suggestion you could have made as far as protocols go.

A better test would be to have someone set up a telnet or other type of
daemon to listen on port 80, then using raw telnet to test it. Or even
using any of the various free HTTP proxies to do similar "tunneling"
tests. Or, have someone set up a lightweight web server like thttpd on a
port you believe is blocked, and try to browse to that (an even better
test in my opinion).

FWIW, situations where protocols themselves are filtered are very rare.
It's rather hard to do that sort of "content" filtering reliably. 99.99%
of the time it's nothing more than ports, or ranges of ports that are
blocked. And if you do happen to run into this sort of filtering the "HTTP
to odd ports" test will tell you that's what you're dealing with instantly.

.

Relevant Pages

  • RE: Telnet/ftp problems SBS2000
    ... Please make sure your client computers are configured as both Firewall ... will find two options "Enable folder view for FTP sites" and "Use Passive ... that the control connection has been successfully established, ... (other than port 21) ...
    (microsoft.public.windows.server.sbs)
  • SMART FTP
    ... Ftp Client To Smart How ... Active Mode Ftp Port Limit Smart ... Pro Keygen Ftp Smart Client ...
    (sci.anthropology)
  • FTP transfer port
    ... FTP transfer port ... the FTP server "listens" for client connections on its port 21. ... it will establish a separate control connection and data connection with ...
    (bit.listserv.ibm-main)
  • Re: Hacked? External address knocks on internal private address...
    ... The important part of your message is that FTP is allowed out... ... You open a connection to an FTP Server and logon. ... When you ask the server for a file the server issues a "PORT" command ... so it can open a port on the firewall to allow the incoming Data ...
    (comp.security.firewalls)
  • Re: Question: FTP via alternate port
    ... The problem with FTP is that it requires two ports to operate. ... FTP command stream in order to dynamically open that port for the data ... Ideally the attacker would want to upload another tool onto the ...
    (Pen-Test)