TRANSPORT LAYER PORTS (IANA STANDARDS) & FIREWALL RECONNAISSANCE
Architectural overview of TCP/UDP port ranges, socket bindings, port scanning defense, and firewall configuration syntax.
1. Port Ranges & Classification (RFC 6335)
Internet transport layer port numbers are 16-bit unsigned integers (ranging from 0 to 65535) divided into three distinct functional categories:
- Well-Known System Ports (0 – 1023): Reserved for privileged OS services and foundational Internet protocols (e.g., HTTP 80, HTTPS 443, SSH 22, DNS 53). In POSIX environments, opening sockets in this range requires superuser (
root) capabilities. - Registered Ports (1024 – 49151): Assigned by IANA for specific user applications, game servers, database management systems (MySQL 3306, Postgres 5432, Redis 6379), and web frameworks.
- Dynamic & Ephemeral Ports (49152 – 65535): Used automatically by client operating systems for outbound temporary transport socket sessions.
1. Air-Gapped Recon
All 75+ database records are statically compiled inside the client bundle. No scanning probes or network requests are emitted.
2. Threat Classification
Identifies unencrypted legacy protocols (Telnet 23, FTP 21) and ransomware-targeted vectors (SMB 445, RDP 3389).
3. Ready Firewall Rules
Instantly copy
iptables and ufw defense commands directly from each row.