network security help

Iwas wondering if anyone here was into WiFi? I want to secure my airport
> network better...can anyone help me protect Bind 53? I did a port scan
> with MacAnalysis and it told me that Port 53 was active and it was high
> risk, but it didn't tell me how to fix it. I use Airport Extreme with a
> powerbook.

In article <(E-Mail Removed)>, Randy Hills wrote:
> Iwas wondering if anyone here was into WiFi? I want to secure my airport
>> network better...can anyone help me protect Bind 53? I did a port scan
>> with MacAnalysis and it told me that Port 53 was active and it was high
>> risk, but it didn't tell me how to fix it. I use Airport Extreme with a
>> powerbook.
>
Port 53 (UDP only probably) is DNS lookup. This port should be open if you
use your Airport for DNS lookup's. I am assuming you are scanning from
inside your network; which is a little useless as you need to know what it
looks like from the internet.

Try using one of the many online security port scanners at your IP address
and see what the internet sees. Do bear in mind that the site is likely to
spread FUD (Fear, Uncertainy, Doubt) that your system is insecure for simple
things such as "oh your machine can be ping'ed....therefore it is possible to
be hacked" :-/

Regards

Alex

--
Alexander Clouter <(E-Mail Removed)>
MetroNet Support http://www.metronet.co.uk/support/

Metronet Support <(E-Mail Removed)> wrote:

> In article <(E-Mail Removed)>, Randy Hills wrote:
> > Iwas wondering if anyone here was into WiFi? I want to secure my
airport
> >> network better...can anyone help me protect Bind 53? I did a port scan
> >> with MacAnalysis and it told me that Port 53 was active and it was high
> >> risk, but it didn't tell me how to fix it. I use Airport Extreme with
a
> >> powerbook.
> >
> Port 53 (UDP only probably) is DNS lookup. This port should be open if
you
> use your Airport for DNS lookup's. I am assuming you are scanning from
> inside your network; which is a little useless as you need to know what it
> looks like from the internet.
>
> Try using one of the many online security port scanners at your IP address
> and see what the internet sees. Do bear in mind that the site is likely
to
> spread FUD (Fear, Uncertainy, Doubt) that your system is insecure for
simple
> things such as "oh your machine can be ping'ed....therefore it is possible
to
> be hacked" :-/
>
> Regards
>
> Alex
>

http://www.pcflank.com/ is a good site to use. Unlike GRC, it allows you to
scan the full range of network ports using the advanced port scanner. It
also has some usefull information on security in general without the normal
scare tactics.

--

Martin