opening ports below 1024 without being root?

meks · 12-23-2003, 08:01 PM

hi there.

as you already read in the subject, i'm trying to open an unused port below 1024 (1002 in particular) without being root.

i want to run ntop's web interface on port 1002, since my firewall is blocking all inbound connections below 1024.

i believe that theres no way of doing this without root permissions. am i right?

thanks in advance

meks.

peter_robb · 12-25-2003, 12:09 PM

Quite right.
Needs to have root privelege to bind to that port...

or you could redirect another port to the ntop server.

" since my firewall is blocking all inbound connections below 1024 "
below or above 1024?
Most registered & legitimate services are below 1024...

meks · 12-25-2003, 06:05 PM

Quote:

Originally posted by peter_robb
below or above 1024?
Most registered & legitimate services are below 1024...

actually, all inbound connections BELOW 1024. if you're connecting to an ftp (via port 21) the ftp data will not be transferred via 20/21 but via something above 1024.
so, with my current iptables-config, i will be able to connect to the ports 1-1024 but nobody else will be able to do this vice versa.
and of course all ports above 1024 (except some few) may be used for either inbound or outbound.