Does my box leaking to the Internet?

**unf4b1x** · January 29th, 2009

As you login, if your internet connection is active but you are not browsing or doing anything, does it always show that other ip addresses seem to be connecting to you? Because I could see that using etherape who is capturing on any interfaces other ip addresses seems connecting to my box. And checking it using the command:

Code:

sudo netstat -pantu

..it shows havp/cupsd/nessusd: waiting/darkstat/avahi-daemon on a listening state... and also upon checking it on grc.com's Shield's Up using galeon browser...it shows ok... got a nonresolvable ip... then upon checking using the All Service Ports.. it showed a stealthed ports and I passed... but the thing is my modem is actively doing something... as well as etherape's graphical view Can somebody please help! I still don't know how to check this.

**lazyart** · January 29th, 2009

Welcome to the internet.

**3rdalbum** · January 29th, 2009

If all ports are stealthed, it means nothing outside your network can connect to you. The other services are either listening to "localhost" only, or are accepting connections across your network, and are being protected by your broadband modem's firewall.

**unf4b1x** · January 29th, 2009

Originally Posted by 3rdalbum

... are accepting connections across your network,

Do you mean "accepting connections on my ISP's network or mine?

Are there any other way, maybe, using another application to check if I got open/close or hidden applications using some of my ports from within besides netstat?

**xpod** · January 29th, 2009

Are there any other way, maybe, using another application to check if I got open/close or hidden applications using some of my ports from within besides netstat?

You could install nmap to scan your computers/network.

Code:

sudo apt-get install nmap

Or,you could try Shieldsup for checking which ports you have open/closed/stealthed to the outside world.

**unf4b1x** · January 29th, 2009

Originally Posted by xpod

You could install nmap to scan your computers/network.

Code:

sudo apt-get install nmap

Or,you could try Shieldsup for checking which ports you have open/closed/stealthed to the outside world.

Thanks, but I already have done that with Shiedsup. It looks fine though.

I'm going to read more about nmap and maybe try some of its commands.. I think I'm going to do a trial and error here. I'm sure netstat has limits to its capabilities to scan ports on localhost. Or, maybe I am just missing some points here in using netstat. What dyou think?