up vote -3 down vote favorite
share [g+] share [fb]

If I created a network with one web pc and one database pc and only allowed access to 80 port and 443 port from the 'outside' and blocked any access to others, how would people hack my network? Are any servers setup like this and why not? I would be using Ethernet.

link|improve this question
"only allowed access to 80 port and 443 port from the 'outside'" - you're still allowing outside access. The only way to truly isolate yourself from hacking attempts is to either physically disconnect your machine, or literally block both inbound and outbound connections (which would have the same effect as just disconnecting your machine). – Breakthrough Jul 20 '11 at 22:32
@Breakthrough but as far as I believe something has to handle the port; even if the server daemon crashed, leaving 80 open what can it do. Is it still hackable in any way but exploiting the website – Will03uk Jul 20 '11 at 22:40
This is similar to asking "Is there a car that won't wreck if I get hit by a Mac Truck??" – surfasb Jul 20 '11 at 22:51
Well my view is why are simple setups remotely hackable? Call me ignorant but the computer has full control of the data it receives; hacking into a server is manipulating that process in a malicious way. If that's the case then surely if you only allow port 80 and 443, only bind it to the server handler and scrutinize every post into that application how would someone hack it? You can surely only make http request which can easily be secured. I am getting this completely wrong? If someone threw a webpage out of the car as that's all it needed to do, would it crash? – Will03uk Jul 20 '11 at 23:03
It's a computer. Quite simple. Give input A, it will respond with Instruction B. Every single friggin time. You put garbage in, you get garbage out. Every single friggin time. As long as a computer stays predictable, it will always be hackable. – surfasb Jul 21 '11 at 0:06
show 7 more comments
feedback

closed as not constructive by Breakthrough, studiohack♦ Jul 20 '11 at 22:39

This question is not a good fit to our Q&A format. We expect answers to generally involve facts, references, or specific expertise; this question will likely solicit opinion, debate, arguments, polling, or extended discussion. See the FAQ for guidance on how to improve it.

2 Answers

up vote 2 down vote

In short nothing is unhackable.

Now the firewall would keep out request going to other ports ( ssh, ftp, etc. ) but if there is any vulnerability in your web site that could be used as an entry point. As you are saying you will be running a database server I'm going to assume that your web server would be running some type of web application and not just serving static pages. This could also be an entry point for an attacker as an incorrectly configured or written web application can open security holes. If you provide more information about what exactly you are trying to setup we should be able to better help you secure it.

link|improve this answer
feedback
up vote 1 down vote

It's always best to assume that nothing will ever be 100% secure if it's in any way connected to the Internet (or even if it isn't and someone is able to gain physical access to it.)

People will keep finding security holes and it'll still be susceptible to disruption attacks.

Short answer: No.

link|improve this answer
feedback

Not the answer you're looking for? Browse other questions tagged or ask your own question.