A port is a point of communication. In an operating system, a port can be either opened or closed to allow data packets for particular processes or network services.<\/p>\n
Normally, ports are used to designate a particular network service. It is possible to alter this by manually adjusting the service to utilize a different port, but it is generally acceptable to stick with the default settings.<\/p>\n
The initial 1024 ports, ranging from port number 0 to 1023, are known as well-known ports and are exclusively reserved for the most frequently utilized services. Examples of such services include SSH (port 22), HTTP (port 80), and HTTPS (port 443).<\/p>\n
Port numbers that exceed 1024 are commonly known as ephemeral ports.<\/p>\n
You will be learning how to open a temporary port on a Linux system in this tutorial. This is necessary because the commonly used services tend to rely on the well-known ports.<\/p>\n
Info<\/p>\n
In order to finish this tutorial, you will require:<\/p>\n
In order to open a port on Linux, it is important to examine the inventory of all accessible ports first and select an ephemeral port that is not present in that list.<\/p>\n
You can employ the netstat command to display a comprehensive list of open ports, encompassing both TCP and UDP, which are the predominant protocols utilized for packet transmission in the network layer.<\/p>\n
<\/code><\/pre>\n\n- netstat<\/span> -lntu<\/span><\/li>\n<\/ol>\n
<\/code><\/pre>\n <\/p>\n
<\/code><\/pre>\nThe output will be displayed.<\/p>\n
\n- all listening sockets (-l)<\/li>\n
- the port number (-n)<\/li>\n
- TCP ports (-t)<\/li>\n
- UDP ports (-u)<\/li>\n<\/ul>\n
<\/code><\/pre>\nOutput<\/div>\n<\/code><\/pre>\nActive Internet connections (only servers) Proto Recv-Q Send-Q Local Address Foreign Address State tcp 0 0 127.0.0.1:5432 0.0.0.0:* LISTEN tcp 0 0 127.0.0.1:27017 0.0.0.0:* LISTEN tcp 0 0 127.0.0.1:6379 0.0.0.0:* LISTEN tcp 0 0 127.0.0.53:53 0.0.0.0:* LISTEN tcp 0 0 0.0.0.0:22 0.0.0.0:* LISTEN tcp6 0 0 ::1:5432 :::* LISTEN tcp6 0 0 ::1:6379 :::* LISTEN tcp6 0 0 :::22 :::* LISTEN udp 0 0 127.0.0.53:53 0.0.0.0:* LISTEN<\/p>\n
<\/code><\/pre>\n\nNote<\/p>\n
If netstat is not available in your distribution, you can utilize the ss command to identify open ports by examining listening sockets.<\/div>\n<\/div>\nConfirm that you are obtaining reliable results by utilizing the ss command to display a list of listening sockets alongside an open port.<\/p>\n
<\/code><\/pre>\n\n- ss -lntu<\/span><\/li>\n<\/ol>\n
<\/code><\/pre>\n <\/p>\n
<\/code><\/pre>\nThe output will be displayed.<\/p>\n
<\/code><\/pre>\nOutput<\/div>\n<\/code><\/pre>\nNetid State Recv-Q Send-Q Local Address:Port Peer Address:Port udp UNCONN 0 0 127.0.0.53%lo:53 0.0.0.0:* tcp LISTEN 0 128 127.0.0.1:5432 0.0.0.0:* tcp LISTEN 0 128 127.0.0.1:27017 0.0.0.0:* tcp LISTEN 0 128 127.0.0.1:6379 0.0.0.0:* tcp LISTEN 0 128 127.0.0.53%lo:53 0.0.0.0:* tcp LISTEN 0 128 0.0.0.0:22 0.0.0.0:* tcp LISTEN 0 128 [::1]:5432 0.0.0.0:* tcp LISTEN 0 128 [::1]:6379 0.0.0.0:* tcp LISTEN 0 128 [::]:22 0.0.0.0:*<\/p>\n
<\/code><\/pre>\nThis provides a similar listing of open ports as netstat.<\/p>\n
Enabling TCP connections by opening a port on a Linux system.<\/h2>\n
Open a port that is currently closed and set it to listen for TCP connections.<\/p>\n
For this tutorial, you will be required to open port 4000. In case that port is not accessible on your system, you can select any other closed port as long as it is greater than 1023.<\/p>\n
Use the netstat command to verify that port 4000 is not being utilized.<\/p>\n
<\/code><\/pre>\n\n- netstat<\/span> -na<\/span> |<\/span> grep<\/span> :4000<\/mark><\/li>\n<\/ol>\n
<\/code><\/pre>\n <\/p>\n
<\/code><\/pre>\nAlternatively, you can use the ss command.<\/p>\n
<\/code><\/pre>\n\n- ss -na<\/span> |<\/span> grep<\/span> :4000<\/mark><\/li>\n<\/ol>\n
<\/code><\/pre>\n <\/p>\n
<\/code><\/pre>\nThe result should be empty to confirm that it is not currently in use, allowing you to manually add the port regulations to the system’s iptables firewall.<\/p>\n
For individuals using Ubuntu and systems based on ufw.<\/h3>\n
Simply utilize ufw, the command line interface for the UncomplicatedFirewall.<\/p>\n
Your instructions will be similar to:<\/p>\n
<\/code><\/pre>\n\n- sudo<\/span> ufw allow 4000<\/span><\/mark><\/li>\n<\/ol>\n
<\/code><\/pre>\n <\/p>\n
<\/code><\/pre>\nPlease consult the instructions for setting up a ufw Firewall on your specific distribution.<\/p>\n
\nNote<\/p>\n
Ubuntu 14.0.4: “Permitting Specific Port Ranges”
\nUbuntu 16.0.4\/18.0.4\/20.0.4\/22.0.4: “Permitting Other Connections \/ Specific Port Ranges”
\nDebian 9\/10\/11: “Permitting Other Connections \/ Specific Port Ranges”<\/div>\n<\/div>\nFor CentOS and Systems that use firewalld,<\/h3>\n
To manage the firewalld daemon, employ the command line client known as firewall-cmd.<\/p>\n
The commands you give will be similar to:<\/p>\n
<\/code><\/pre>\n\n- firewall-cmd –add-port=<\/span>4000<\/span><\/mark>\/tcp<\/li>\n<\/ol>\n
<\/code><\/pre>\n <\/p>\n
<\/code><\/pre>\nPlease refer to the instructions provided for setting up firewalld on your specific distribution.<\/p>\n
\nNote<\/p>\n
Please note that for CentOS 7\/8, the process is called “Setting Rules for your Applications \/ Opening a Port for your Zones.” Similarly, for Rocky Linux 8\/9, the process is also referred to as “Setting Rules for your Applications \/ Opening a Port for your Zones.”<\/div>\n<\/div>\nFor alternative Linux distributions.<\/h3>\n
Utilize iptables for modifying the IPv4 packet filter rules of the system.<\/p>\n
<\/code><\/pre>\n\n- iptables -A<\/span> INPUT -p<\/span> tcp –dport<\/span> 4000<\/span><\/mark> -j<\/span> ACCEPT<\/li>\n<\/ol>\n
<\/code><\/pre>\n <\/p>\n
<\/code><\/pre>\nPlease consult the documentation specific to your distribution on how to configure a firewall using iptables.<\/p>\n
\nNote<\/p>\n
Ubuntu 12.04: “A Simple Firewall”
\nUbuntu 14.04: “Allow Essential Connections”<\/div>\n<\/div>\nCheck the TCP connection of the recently opened port.<\/h2>\n
Having successfully established a new TCP port, it is now necessary to conduct a test.<\/p>\n
To begin, initiate netcat (nc) and wait for incoming connections (-l) on port (-p) 4000. Simultaneously, transmit the result of the ls command to any connected recipient.<\/p>\n
<\/code><\/pre>\n\n- ls<\/span> |<\/span> nc<\/span> -l<\/span> -p<\/span> 4000<\/span><\/mark><\/li>\n<\/ol>\n
<\/code><\/pre>\n <\/p>\n
<\/code><\/pre>\nFor now, please let this session be as it is after the client has established a TCP connection on port 4000. The client will receive the output of the “ls” command.<\/p>\n
Open up a new terminal session on the identical device.<\/p>\n
If you have enabled a TCP port, you can verify TCP connectivity by using telnet. In case telnet is not available, you can install it through your package manager.<\/p>\n
To execute, enter the command by providing your server’s IP address and the port number (4000 in this case).<\/p>\n
<\/code><\/pre>\n\n- telnet localhost<\/mark> 4000<\/span><\/mark><\/li>\n<\/ol>\n
<\/code><\/pre>\n <\/p>\n
<\/code><\/pre>\nThe aim of this instruction is to establish a TCP connection to the localhost at port 4000.<\/p>\n
You will receive a result similar to this one, which shows that a connection has successfully been made with the listening program (nc).<\/p>\n
<\/code><\/pre>\nOutput<\/div>\n<\/code><\/pre>\nTrying ::1… Trying 127.0.0.1… Connected to localhost. Escape character is ‘^]’. while.sh<\/p>\n
<\/code><\/pre>\nThe client has received a successful TCP Connection, as indicated by the ls output (such as while.sh) being sent.<\/p>\n
Utilize nmap to verify if the port is accessible.<\/p>\n
<\/code><\/pre>\n\n- nmap localhost<\/mark> -p<\/span> 4000<\/span><\/mark><\/li>\n<\/ol>\n
<\/code><\/pre>\n <\/p>\n
<\/code><\/pre>\nThis instruction will verify the accessible port.<\/p>\n
<\/code><\/pre>\nOutput<\/div>\n<\/code><\/pre>\nStarting Nmap 7.60 ( https:\/\/nmap.org ) at 2020-01-18 21:51 UTC Nmap scan report for localhost (127.0.0.1) Host is up (0.00010s latency). Other addresses for localhost (not scanned): ::1 PORT STATE SERVICE 4000\/tcp open remoteanything Nmap done: 1 IP address (1 host up) scanned in 0.25 seconds<\/p>\n
<\/code><\/pre>\nThe port is now open. You have successfully created a new port on your Linux system.<\/p>\n
\nNote<\/p>\n
Please take note that nmap will only display open ports if there is an application currently listening on them. If you do not have any listening applications, like netcat, the port 4000 will appear as closed because there is no application currently using it. Similarly, telnet will not function without a listening application. This is why nc is a valuable tool, as it can simulate these situations with a single command.<\/div>\n<\/div>\nHowever, this is just a temporary situation since the modifications will be reverted every time the system is restarted.<\/p>\n
Continuing regulations<\/h2>\n
The method outlined in this article will merely update the firewall rules temporarily, which will only remain in effect until the system is powered off or restarted. Consequently, you will need to follow the same steps once more in order to reopen the identical port after a reboot.<\/p>\n
Regarding the ufw Firewall<\/h3>\n
The reason why the ufw rules remain unchanged after reboot is because the firewall rules are incorporated into the boot process and the kernel saves them using ufw through the application of suitable configuration files.<\/p>\n
Regarding firewalld<\/h3>\n
To make changes permanent, the “–permanent” flag must be applied.<\/p>\n
Please consult the instructions specific to your operating system on setting up firewalld.<\/p>\n
\nNote<\/p>\n
Please note that in CentOS 7\/8, it is referred to as “Setting Rules for your Applications,” while in Rocky Linux 8\/9, it is also called “Setting Rules for your Applications.”<\/div>\n<\/div>\nRegarding iptables<\/h3>\n
The saving of configuration rules is required, as per these tutorials, iptables-persistent is recommended.<\/p>\n
Please consult the documentation specific to your distribution on setting up a firewall using iptables.<\/p>\n
\nNote<\/p>\n
\nPlease make a note of the following:<\/p>\n
Ubuntu 12.04: “Preservation of Iptables Rules”
\nUbuntu 14.04: “Preservation of your Iptables Configuration”<\/p>\n<\/div>\n<\/div>\n
In conclusion,<\/h2>\n
You have gained the knowledge to initiate a fresh port on Linux and configure it to accept incoming connections. Furthermore, you have employed netstat, ss, telnet, nc, and nmap in the process.<\/p>\n
Keep enhancing your knowledge by exploring How the Iptables Firewall Operates, Delving into Iptables and Netfilter Architecture in Depth, Getting Familiar with Sockets, and Utilizing Top, Netstat, Du, & Other Tools for Tracking Server Resources.<\/p>\n
<\/p>\n
more tutorials<\/p>\n
Common errors that occur when using Nginx for connections.(Opens in a new browser tab)<\/span><\/a><\/p>\nThe top seven Linux distributions for laptops(Opens in a new browser tab)<\/span><\/a><\/p>\nInstallation of Arch Linux(Opens in a new browser tab)<\/span><\/a><\/p>\nPython 3 installing on Rocky Linux 9(Opens in a new browser tab)<\/span><\/a><\/p>\n