Re: ssh on ping port?



On Sun, 29 Jan 2006 21:45:07 +0000, James J. Dines wrote:

Yes - ping doesn't use a port.

http://en.wikipedia.org/wiki/ICMP

Ping absolutely *does* use a port. Ping is a program which sends ICMP ECHO
REQUEST and receives ICMP ECHO REPLY. On my Mandriva Linux 2006
box, /etc/services shows that port 7 is used.

type (in a terminal, of course):
cat /etc/services | grep echo
... to verify this.

Err. As I understand it - that is the 'echo service'. aka Ping over
TCP/UDP. A 'Normal' Ping (ie ICMP Ping ) does not use UDP/TCP and thus
does not use TCP/UDP ports.

ie This port has NOTHING to do with a normal ICMP Ping.
and as you pointed out - strictly its not a Ping port.. but an 'echo'
port. Strictly a TCP/UDP echo port.

*ICMP* ECHO does not does this port. So you statement above is either
confusing or wrong :)

http://www.netbook.cs.purdue.edu/othrpags/qanda244.htm

Now as people typically do not have the 'echo' service running, then you
could make sshd use this port. IMO this is not such a good idea if the
main purpose was 'security through obscurity' becuase port 7 is a low port
number and will be included in most port scans.
It may also intefere with programs (likely Java based) that may be doing
UDP Pings (as JAva cannot do normal ICMP Pings AFAIK)

IMO Better to use a high port , eg 22222 etc. Which tend not to be
included in most basic scans.

Lordy

.



Relevant Pages

  • Re: Stupid Question #1
    ... ICMP traffic exception choices under SP2 firewall, a ping still ... source or remote site scan ports until it found an open port to ... The explanation given "Sooner Al" was that SP2 firewall would always ...
    (microsoft.public.windowsxp.network_web)
  • Re: [fw-wiz] ECHO Protocol
    ... Yes, I know that there are alternate "ping" programs that will allow you to use TCP, UDP or possibly anything that programmer could think of, but the traditional ping uses ICMP. ... Two of the ICMP types are referred to as echo and echo reply, which are the ICMP types used for ping. ... Ping command in Windows uses ICMP protocol, while others say that Ping uses ...
    (Firewall-Wizards)
  • Re: Sites not opening
    ... This is normal if the remote site is configured to not return ICMP ... responses, aka ping, traceroute and the like requests... ... security issue so most people "in the know" disable ICMP responses at the firewall. ... or using telnet, to a specific port: ...
    (microsoft.public.internet.explorer.ieak)
  • Re: UDP Port 7 - trying to understand
    ... TCP and UDP echo is extremely rare - most systems to not have the client ... The "ping" you are used to is the ICMP Type 8 packet, ... Doesn't look any more of a problem than the average port scan. ... to the broadcast address of a network using UDP on port 7...you could ...
    (comp.security.misc)
  • Re: allow specific IP full access, bypassing the ISA server
    ... Their ICMP comments make no sense. ... Ping always reports as port "0". ... Then a server publishing rule, listening on port 2001, publishing the ...
    (microsoft.public.isa)