Hot answers tagged

17

Is it possible to configure Linux to use 64 bit ports? You cannot change a parameter to use 64bit ports in TCP/UDP. You could create similar protocols, but you would only be able to communicate with your modified hosts and it would not be TCP / UDP, but a new set of protocols, let's say TCP64 / UDP64. Here are just some of the things you'd have to add for ...


9

Having a 64b port makes it almost impossible to randomly attack a service, targeting either DoS or a login. Like ssh -p 141592653589793238 my.site.com And how would the client know about 141592653589793238? If this is available from some kind of directory or query service, then the attacker will obtain the port number from that service and there is no ...


7

As others have mentioned, it is not possible as both TCP and UDP use 16 bits for port designation. So you'd have to have all the hosts on the internet change the TCP protocol to something else, which is highly unlikely to happen. Luckily, we do have IPv6 deployed nowadays in many places, so instead of having attacker guess what is your port, you can have ...


2

Your interface vmbr0 is configured with a default gateway in a different subnet (in other words another logical range) than the IP address. The gateway IP tells the system how to get to another subnet, and without it, packets won't leave the current subnet. For instance, the 192.168.42.0/24 subnet has the following range of usable IP addresses: 192.168.42.1 -...


2

I think you're looking for (the Linux-only) SO_BINDTODEVICE. From man 7 socket: SO_BINDTODEVICE Bind this socket to a particular device like “eth0”, as specified in the passed interface name. If the name is an empty string or the option length is zero, the socket device binding is removed. The passed option is a variable-length ...


1

From the routing table output that you shared, you have two default gateways and that is a problem. You just need one default gateway and the rest should be specific destination networks.


Only top voted, non community-wiki answers of a minimum length are eligible