How to confirm a low number port (67 UDP) is closed?

up vote
2
down vote

favorite

Based on this answer closing port 67 UDP outgoing should be

firewall-cmd --permanent --direct --add-rule ipv4 filter OUTPUT 0 -p udp -m udp --dport=67 -j ACCEPT
firewall-cmd --permanent --direct --add-rule ipv4 filter OUTPUT 1 -j DROP
firewall-cmd --reload

Port 67 UDP is the port a DHCP server uses, so I would like to verify that the port is indeed closed before I start the dhcp server, so I can experiment with it in a sandbox.

Question

Since it is UDP and below 1024, how can I comfirm it is closed?

asked 2 hours ago

Sandra

4,3433275137

add a commentÂ |Â

up vote
2
down vote

favorite

Based on this answer closing port 67 UDP outgoing should be

firewall-cmd --permanent --direct --add-rule ipv4 filter OUTPUT 0 -p udp -m udp --dport=67 -j ACCEPT
firewall-cmd --permanent --direct --add-rule ipv4 filter OUTPUT 1 -j DROP
firewall-cmd --reload

Port 67 UDP is the port a DHCP server uses, so I would like to verify that the port is indeed closed before I start the dhcp server, so I can experiment with it in a sandbox.

Question

Since it is UDP and below 1024, how can I comfirm it is closed?

asked 2 hours ago

Sandra

4,3433275137

add a commentÂ |Â

up vote
2
down vote

favorite

Based on this answer closing port 67 UDP outgoing should be

firewall-cmd --permanent --direct --add-rule ipv4 filter OUTPUT 0 -p udp -m udp --dport=67 -j ACCEPT
firewall-cmd --permanent --direct --add-rule ipv4 filter OUTPUT 1 -j DROP
firewall-cmd --reload

Port 67 UDP is the port a DHCP server uses, so I would like to verify that the port is indeed closed before I start the dhcp server, so I can experiment with it in a sandbox.

Question

Since it is UDP and below 1024, how can I comfirm it is closed?

asked 2 hours ago

Sandra

4,3433275137

Based on this answer closing port 67 UDP outgoing should be

firewall-cmd --permanent --direct --add-rule ipv4 filter OUTPUT 0 -p udp -m udp --dport=67 -j ACCEPT
firewall-cmd --permanent --direct --add-rule ipv4 filter OUTPUT 1 -j DROP
firewall-cmd --reload

Port 67 UDP is the port a DHCP server uses, so I would like to verify that the port is indeed closed before I start the dhcp server, so I can experiment with it in a sandbox.

Question

Since it is UDP and below 1024, how can I comfirm it is closed?

linux networking firewall

asked 2 hours ago

Sandra

4,3433275137

asked 2 hours ago

Sandra

4,3433275137

asked 2 hours ago

Sandra

4,3433275137

asked 2 hours ago

Sandra

4,3433275137

asked 2 hours ago

Sandra

4,3433275137

add a commentÂ |Â

3 Answers
3

active

oldest

votes

up vote
2
down vote

accepted

You can use a tool like netcat (on the server echo test | nc -u <other IP> 67 and on another machine nc -u -l -p 67, or use Wireshark or similar) and see if the message pops up.

answered 2 hours ago

user

361

New contributor

add a commentÂ |Â

up vote
1
down vote

Port 67 UDP is the port a DHCP server uses, so I would like to verify
that the port is indeed closed before I start the dhcp server, so I
can experiment with it in a sandbox.

A test DHCP server should be isolated in a VLAN or configured with split scopes that don't overlap existing DHCP ranges. If test and production are in the same broadcast domain, either may get the broadcast which may cause unexpected behavior. See: 2 DHCP servers on one network

Also, you can limit the interfaces dhcpd is listening on to this sandbox net. Without relay agents, it won't see DHCPDISCOVER messages on other nets.

answered 1 hour ago

John Mahowald

5,8921612

add a commentÂ |Â

up vote
0
down vote

I'm pretty sure you could use Nmap's UDP port scan to specify the protocol and port. The syntax is as follows:

$ sudo nmap -sU -p port target

answered 2 hours ago

OHackerDoAmor

New contributor

add a commentÂ |Â

Your Answer

StackExchange.ready(function()
var channelOptions =
tags: "".split(" "),
id: "2"
;
initTagRenderer("".split(" "), "".split(" "), channelOptions);

StackExchange.using("externalEditor", function()
// Have to fire editor after snippets, if snippets enabled
if (StackExchange.settings.snippets.snippetsEnabled)
StackExchange.using("snippets", function()
createEditor();
);

else
createEditor();

);

function createEditor()
StackExchange.prepareEditor(
heartbeatType: 'answer',
convertImagesToLinks: true,
noModals: false,
showLowRepImageUploadWarning: true,
reputationToPostImages: 10,
bindNavPrevention: true,
postfix: "",
onDemand: true,
discardSelector: ".discard-answer"
,immediatelyShowMarkdownHelp:true
);

);

draft saved

draft discarded

StackExchange.ready(
function ()
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fserverfault.com%2fquestions%2f937838%2fhow-to-confirm-a-low-number-port-67-udp-is-closed%23new-answer', 'question_page');

);

Post as a guest

Name

3 Answers
3

active

oldest

votes

3 Answers
3

active

oldest

votes

up vote
2
down vote

accepted

You can use a tool like netcat (on the server echo test | nc -u <other IP> 67 and on another machine nc -u -l -p 67, or use Wireshark or similar) and see if the message pops up.

answered 2 hours ago

user

361

New contributor

add a commentÂ |Â

up vote
2
down vote

accepted

You can use a tool like netcat (on the server echo test | nc -u <other IP> 67 and on another machine nc -u -l -p 67, or use Wireshark or similar) and see if the message pops up.

answered 2 hours ago

user

361

New contributor

add a commentÂ |Â

up vote
2
down vote

accepted

You can use a tool like netcat (on the server echo test | nc -u <other IP> 67 and on another machine nc -u -l -p 67, or use Wireshark or similar) and see if the message pops up.

answered 2 hours ago

user

361

New contributor

You can use a tool like netcat (on the server echo test | nc -u <other IP> 67 and on another machine nc -u -l -p 67, or use Wireshark or similar) and see if the message pops up.

answered 2 hours ago

user

361

New contributor

answered 2 hours ago

user

361

New contributor

answered 2 hours ago

user

361

answered 2 hours ago

user

361

New contributor

user is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.

add a commentÂ |Â

up vote
1
down vote

Port 67 UDP is the port a DHCP server uses, so I would like to verify
that the port is indeed closed before I start the dhcp server, so I
can experiment with it in a sandbox.

Also, you can limit the interfaces dhcpd is listening on to this sandbox net. Without relay agents, it won't see DHCPDISCOVER messages on other nets.

answered 1 hour ago

John Mahowald

5,8921612

add a commentÂ |Â

up vote
1
down vote

Port 67 UDP is the port a DHCP server uses, so I would like to verify
that the port is indeed closed before I start the dhcp server, so I
can experiment with it in a sandbox.

Also, you can limit the interfaces dhcpd is listening on to this sandbox net. Without relay agents, it won't see DHCPDISCOVER messages on other nets.

answered 1 hour ago

John Mahowald

5,8921612

add a commentÂ |Â

up vote
1
down vote

Port 67 UDP is the port a DHCP server uses, so I would like to verify
that the port is indeed closed before I start the dhcp server, so I
can experiment with it in a sandbox.

Also, you can limit the interfaces dhcpd is listening on to this sandbox net. Without relay agents, it won't see DHCPDISCOVER messages on other nets.

answered 1 hour ago

John Mahowald

5,8921612

Port 67 UDP is the port a DHCP server uses, so I would like to verify
that the port is indeed closed before I start the dhcp server, so I
can experiment with it in a sandbox.

Also, you can limit the interfaces dhcpd is listening on to this sandbox net. Without relay agents, it won't see DHCPDISCOVER messages on other nets.

answered 1 hour ago

John Mahowald

5,8921612

answered 1 hour ago

John Mahowald

5,8921612

answered 1 hour ago

John Mahowald

5,8921612

answered 1 hour ago

John Mahowald

5,8921612

add a commentÂ |Â

up vote
0
down vote

I'm pretty sure you could use Nmap's UDP port scan to specify the protocol and port. The syntax is as follows:

$ sudo nmap -sU -p port target

answered 2 hours ago

OHackerDoAmor

New contributor

add a commentÂ |Â

up vote
0
down vote

I'm pretty sure you could use Nmap's UDP port scan to specify the protocol and port. The syntax is as follows:

$ sudo nmap -sU -p port target

answered 2 hours ago

OHackerDoAmor

New contributor

add a commentÂ |Â

up vote
0
down vote

I'm pretty sure you could use Nmap's UDP port scan to specify the protocol and port. The syntax is as follows:

$ sudo nmap -sU -p port target

answered 2 hours ago

OHackerDoAmor

New contributor

I'm pretty sure you could use Nmap's UDP port scan to specify the protocol and port. The syntax is as follows:

$ sudo nmap -sU -p port target

answered 2 hours ago

OHackerDoAmor

New contributor

answered 2 hours ago

OHackerDoAmor

New contributor

answered 2 hours ago

OHackerDoAmor

answered 2 hours ago

OHackerDoAmor

New contributor

OHackerDoAmor is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.

add a commentÂ |Â

draft saved

draft discarded

draft saved

draft discarded

Post as a guest

Name

Search This Blog

Iyfjky