65k Open TCP Ports

Re:65k Open TCP Ports by nl on Thursday October 20, 2011 @01:42AM (#3133610)

I never realized Chrome blocked some specific ports. Makes sense I guess - but I'll have to remember not to run a webserver on those ports.

[ Parent | on HN ]

Re:65k Open TCP Ports by evmar on Thursday October 20, 2011 @01:46AM (#3133616)

At first you might think "why should Chrome protect people who forget to firewall their intranet?" but the real problem browsers are defending against is some page doing a million <img src='http://10.0.0.1:139>; against an internal service that doesn't handle it well. (Or worse, a POST.)

(PS: HN shows extra characters than what I typed in that HTML. Might be an XSS vulnerability in there.)

[ Parent | on HN ]

Re:65k Open TCP Ports by jdukes on Thursday October 20, 2011 @03:23AM (#3133832)

This actually also has to do with cross protocol attacks. http://i8jesus.com/?p=75

[ Parent | on HN ]

Re:65k Open TCP Ports by maximusprime on Thursday October 20, 2011 @03:57AM (#3133920)

There was an attack last year on freenode which worked like this... javascript did an automatic POST to irc.freenode.net:6667 with form data that included IRC commands to spam channels etc.

Unfortunately at the time their ircd didn't care about the 'POST / HTTP headers', and lovingly accepted the spam.

[ Parent | on HN ]

Re:65k Open TCP Ports by rwmj on Thursday October 20, 2011 @03:38AM (#3133872)

Firefox is blocking port 25 with a warning message.

[ Parent | on HN ]

Re:65k Open TCP Ports by Luyt on Thursday October 20, 2011 @04:27AM (#3133977)

"This address is restricted

This address uses a network port which is normally used for purposes other than Web browsing. Firefox has canceled the request for your protection. "

This 'port banning' is described in http://www-archive.mozilla.org/projects/netlib/PortBanning.h..., and the page at http://agiletesting.blogspot.com/2008/09/getting-around-fire... describes how you can use about:config to disable the blocking:

"1) go to about:config in the Firefox address bar

2) right click, choose new->string

3) enter the name network.security.ports.banned.override and the value '1-65535' (without the quotes) "

I tried it, and it worked: http://open.zorinaq.com:25/

[ Parent | on HN ]