Security Threat of Open Ports

[GoodRevrnd]

When I have open ports in my router for NAPT to refer them to my different comps serving ftp's, DCC connections, webservers, etc., how big of a security threat does this pose? I know with NAPT down you're wide open, so with it up and no routing it stands to reason you're pretty much closed. So with each hole that you poke in it to run a service, does that increase your risk? Or do you have to have that service actually running, or what? Thanks!

 

[bsobel]

The risk comes when you have services actually listening on those ports. They have to be there to actually be attacked. The other risk is just from recon, e.g. someone can figure out that you (at least occasionally) run ftp for example.

Bill

 

[Nothinman]

Like bsobel said, the risk isn't the open ports themselves but the programs exposed via them. Make sure you secure the app properly and keep up on security issues and you'll be fine.