[Cerowrt-devel] open ports on WAN

Chuck Anderson cra at WPI.EDU
Sat Apr 19 12:36:39 EDT 2014

I was curious to see what services were open on the WAN to the CeroWrt
router itself.  It looks like the following services are open and not
firewalled via iptables directly:

21 telnet
22 ssh
23 ftp
873 rsync
12865 netserver

The only thing blocking access is the xinetd configuration:

              per_source = 16
              only_from =
              instances = 18
              max_load = 16

Is this a good idea, relying only on this default config to block
access to those services?  Or should the iptables firewall default to
blocking everything and only poke holes where they are needed rather
than how it is now--only blocking a list of ports which doesn't
include the above ports?

More information about the Cerowrt-devel mailing list