SUS and port 80

Does installing SUS open port 80 on the server? Until recently, I know that
port 80 was closed on our SBS, from using online scans such as those at
GRC.com. A couple of weeks ago I installed SUS and GRC.com now reports that
port 80 is open.

Are the two related, or is this just coincidence?

I haven't installed any other software recently on the server or made
configuration changes in ISA, so I cannot think of any other reasons for the
change. If the change has been made by SUS, is it necessary to leave port 80
open, or is there something I can do to close port 80? If the change has NOT
been made by SUS, what do I need to do to close the port and how can I find
out why the change has occurred?

Regards,
Andrew Stevens.

Mark
Fri Oct 24 07:50:44 CDT 2003

Keep SUS on your private NIC. Unfortunately it won't let you change ports.

--
Sincerely,
Mark Mancini, CCA, CCNA, Master CIW&CI, CNE 4&5, MCSE+I 4&2000
www.MCSE2000.com
www.AppLauncher.com



"Andrew Stevens" <andrew.stevens.nospam@nospam.co.uk> wrote in message
news:%23UgdD7gmDHA.2404@TK2MSFTNGP12.phx.gbl...
> Does installing SUS open port 80 on the server? Until recently, I know
that
> port 80 was closed on our SBS, from using online scans such as those at
> GRC.com. A couple of weeks ago I installed SUS and GRC.com now reports
that
> port 80 is open.
>
> Are the two related, or is this just coincidence?
>
> I haven't installed any other software recently on the server or made
> configuration changes in ISA, so I cannot think of any other reasons for
the
> change. If the change has been made by SUS, is it necessary to leave port
80
> open, or is there something I can do to close port 80? If the change has
NOT
> been made by SUS, what do I need to do to close the port and how can I
find
> out why the change has occurred?
>
> Regards,
> Andrew Stevens.
>
>

rodwhite
Fri Oct 24 08:07:02 CDT 2003

Andrew,

As far as how the port was opened and what opened it you won't be able to
determine that. However, SUS does not need port 80 opened Inbound on the
ISA server. Therefore, you can disable that port within ISA by
right-clicking and selecting Disable.

Thanks for using SBS2000

Roderick [MS]
Windows Small Business Server 2003
http://www.microsoft.com/windowsserver2003/sbs/default.mspx

Tip: You can search for this or other support information by visiting
Microsoft Online Support: http://support.microsoft.com

Mal
Fri Oct 24 20:14:23 CDT 2003

SUS has to run on port#80, but this is only on your inside NIC. You can
have IIS bound to Port 80 on the inside NIC only, that way SUS can work but
there is no security issue.

Mal Osbonre
MCSE MVP Mensa

.
"Andrew Stevens" <andrew.stevens.nospam@nospam.co.uk> wrote in message
news:%23UgdD7gmDHA.2404@TK2MSFTNGP12.phx.gbl...
> Does installing SUS open port 80 on the server? Until recently, I know
that
> port 80 was closed on our SBS, from using online scans such as those at
> GRC.com. A couple of weeks ago I installed SUS and GRC.com now reports
that
> port 80 is open.
>
> Are the two related, or is this just coincidence?
>
> I haven't installed any other software recently on the server or made
> configuration changes in ISA, so I cannot think of any other reasons for
the
> change. If the change has been made by SUS, is it necessary to leave port
80
> open, or is there something I can do to close port 80? If the change has
NOT
> been made by SUS, what do I need to do to close the port and how can I
find
> out why the change has occurred?
>
> Regards,
> Andrew Stevens.
>
>

Andrew
Fri Oct 24 08:33:59 CDT 2003

Thanks for all your responses. Looking at the properties for the default web
site in IIS, the IP address is set to the address of my internal NIC. I take
it this is what you mean by having IIS bound to port 80 on the inside NIC
only? If this is correct, can you think of a reason why the port shows as
open when I do an external scan?

Roderick, you mention disabling the port inbound in ISA by right clicking on
it and selecting disable; where in ISA do I do this?

Regards,
Andrew Stevens.

"Mal Osborne" <malcolmo@silverfern.com.au> wrote in message
news:uyN9wAjmDHA.1656@tk2msftngp13.phx.gbl...
> SUS has to run on port#80, but this is only on your inside NIC. You can
> have IIS bound to Port 80 on the inside NIC only, that way SUS can work
but
> there is no security issue.
>
> Mal Osbonre
> MCSE MVP Mensa
>
> .
> "Andrew Stevens" <andrew.stevens.nospam@nospam.co.uk> wrote in message
> news:%23UgdD7gmDHA.2404@TK2MSFTNGP12.phx.gbl...
> > Does installing SUS open port 80 on the server? Until recently, I know
> that
> > port 80 was closed on our SBS, from using online scans such as those at
> > GRC.com. A couple of weeks ago I installed SUS and GRC.com now reports
> that
> > port 80 is open.
> >
> > Are the two related, or is this just coincidence?
> >
> > I haven't installed any other software recently on the server or made
> > configuration changes in ISA, so I cannot think of any other reasons for
> the
> > change. If the change has been made by SUS, is it necessary to leave
port
> 80
> > open, or is there something I can do to close port 80? If the change has
> NOT
> > been made by SUS, what do I need to do to close the port and how can I
> find
> > out why the change has occurred?
> >
> > Regards,
> > Andrew Stevens.
> >
> >
>
>

rodwhite
Fri Oct 24 10:18:38 CDT 2003

To disable port 25 within ISA:

1. open Isa Management
2. Expand Servers and Arrays\<Servername>\Access Policy\Ip Packet Filters
3. Scroll over till you see Directions ---> Look for an INBOUND with
Local Port 80 and delete the filter.

Roderick

Andrew
Mon Oct 27 05:32:57 CST 2003

Roderick

There is no access policy setup to allow inbound connections on port 80. Do
you have any other ideas why GRC.com would be reporting that the port is
open, even though there is no IP packet filter configured to allow this?

Regards,
Andrew.

""RodWhite [MS]"" <rodwhite@online.microsoft.com> wrote in message
news:29crkIkmDHA.576@cpmsftngxa06.phx.gbl...
> To disable port 25 within ISA:
>
> 1. open Isa Management
> 2. Expand Servers and Arrays\<Servername>\Access Policy\Ip Packet
Filters
> 3. Scroll over till you see Directions ---> Look for an INBOUND with
> Local Port 80 and delete the filter.
>
> Roderick
>

JimBehningmvp
Mon Oct 27 06:44:38 CST 2003

What happnes when you test this at a late hour and offsite?

"Andrew Stevens" <andrew.stevens.nospam@nospam.co.uk> wrote:

>Roderick
>
>There is no access policy setup to allow inbound connections on port 80. Do
>you have any other ideas why GRC.com would be reporting that the port is
>open, even though there is no IP packet filter configured to allow this?
>
>Regards,
>Andrew.
>
>""RodWhite [MS]"" <rodwhite@online.microsoft.com> wrote in message
>news:29crkIkmDHA.576@cpmsftngxa06.phx.gbl...
>> To disable port 25 within ISA:
>>
>> 1. open Isa Management
>> 2. Expand Servers and Arrays\<Servername>\Access Policy\Ip Packet
>Filters
>> 3. Scroll over till you see Directions ---> Look for an INBOUND with
>> Local Port 80 and delete the filter.
>>
>> Roderick
>>
>

Jim B. SBS MVP
remove the mvp to send email

Andrew
Mon Oct 27 08:17:12 CST 2003

I have found the cause of this and resolved it, using the instructions at
smallbizserver.net,
http://www.smallbizserver.net/sbs2000/Why_does_GRC.com_report_that_port_80_and_443_are_open.aspx

The strange thing is, I know that I already made this change months ago on
the server and the port was showing as closed. For some reason the server's
IP address had reappeared in the list.

Most important thing is that I have sorted it, but it does bug me that I
don't know why it happened in the first place. Has anybody else experienced
this, or can anyone come up with a reason why this would happen?

Regards,
Andrew Stevens.

<JimBehningmvp@mindspring.com> wrote in message
news:1v4qpv0s56lbvv6e84p5ejlqc3ugr10pe3@4ax.com...
> What happnes when you test this at a late hour and offsite?
>
> "Andrew Stevens" <andrew.stevens.nospam@nospam.co.uk> wrote:
>
> >Roderick
> >
> >There is no access policy setup to allow inbound connections on port 80.
Do
> >you have any other ideas why GRC.com would be reporting that the port is
> >open, even though there is no IP packet filter configured to allow this?
> >
> >Regards,
> >Andrew.
> >
> >""RodWhite [MS]"" <rodwhite@online.microsoft.com> wrote in message
> >news:29crkIkmDHA.576@cpmsftngxa06.phx.gbl...
> >> To disable port 25 within ISA:
> >>
> >> 1. open Isa Management
> >> 2. Expand Servers and Arrays\<Servername>\Access Policy\Ip Packet
> >Filters
> >> 3. Scroll over till you see Directions ---> Look for an INBOUND
with
> >> Local Port 80 and delete the filter.
> >>
> >> Roderick
> >>
> >
>
> Jim B. SBS MVP
> remove the mvp to send email

jann
Sun Nov 02 06:47:58 CST 2003

I had this too - I believe it is because any rerun of the ICW reinstates
these settings. A bit of a pain, and hopefully not in 2003

HTH