Ports 113, 541 - stealth

[liam3w]

Hello, we would need to make two ports stealth in FG-80CM which www.grc.com display now not stealth - Port 113 auth / ident - is now closed but wanted to be stealth --> www.grc.com diagnostics were: " ... trick is to use the router' s own port forwarding configuration options to forward just port 113 into non-existent IP address and the router will then not return a port closed status.." - Port 541 uucp-rlogin - is now open but wanted to be stealth --> no diagnostics on www.grc.com Any tips how to configure these ports 113 and 541 as stealth in FG-80CM? Thanks liam3w

[ejhardin]

113 http://kb.fortinet.com/kb/microsites/search.do?cmd=displayKC&docType=kc&externalId=11763&sliceId=1&docTypeID=DT_KCARTICLE_1_1&dialogID=32204491&stateId=0%200%2032206063 541 http://kb.fortinet.com/kb/documentLink.do?popup=true&externalID=13724&languageId=

[liam3w]

Thanks for the advice! CLI scripts resolved the problem: config system interface edit wan1 set ident-accept enable end config sys management-tunnel set status disable end

[liam3w]

Hello, after firmware update 3.0 -> 4 MR3 patch 7, port 541 opened again. Following CLI command: " config system central-management set status disable end" returns error message: " command parse error before ' status' Command fail. Return code -61" How port 541 can be closed again? Thanks liam3w

[rwpatterson]

Have you tried using the " ?" to see if the syntax for that command changed?

[liam3w]

Yes, different procedure is needed and that command is not available in 4.3. The following article will explain how to go about blocking port 541 http://kb.fortinet.com/kb/microsites/search.do?cmd=displayKC&docType=kc&externalId=FD33502&sliceId=1&docTypeID=DT_KCARTICLE_1_1&dialogID=33643223&stateId=0%200%2033641739 Thanks liam3w