Home > Ask the Security Experts > Network Security Questions & Answers > Can a TCP connection be made without an open port?
Ask The Security Expert: Questions & Answers
EMAIL THIS

Can a TCP connection be made without an open port?

Mike Chapple, featured expert EXPERT RESPONSE FROM: Mike Chapple, featured expert

Pose a Question
Other Security Categories
Meet all Security Experts
Become an Expert for this site


Digg This!    StumbleUpon Toolbar StumbleUpon    Bookmark with Delicious Del.icio.us   


>
QUESTION POSED ON: 30 December 2006
I've read that there is an "application" that allows computers to communicate without exposing or opening ports to the Internet. Is this possible, and if so, will it create a safer Internet environment?

>
You didn't provide the name of the product, so I can't evaluate this specific application. What you're describing, however, isn't possible. I suspect that the manufacturer is playing some word games to hype their product. Let's explore why.

Two computers communicate over the Internet by using their IP addresses and a combination of ports. The client computer (the one requesting the connection) contacts the server on a known destination port and provides the server with its own IP address and a source port that the server may use for reply traffic. All communication then takes place using those source/destination port and address combinations.

In order for the computers to communicate successfully, the server must have at least one port open to receive inbound requests. The client must then open the source port for replies from that particular system. That's simply the only way that a TCP connection can take place (UDP traffic is slightly different, but follows the same basic idea).

I suspect what the product you describe actually does is swap the client and server roles from their traditional sense. The server and client may both establish a connection to an intermediary server that routes traffic between the two. However, there's simply no way that this can be accomplished without some kind of device listening for traffic on a known port.

More information:

  • See how open ports can increase LAN exposure.
  • Learn how a desktop firewall policy should manage open ports.

  • BROWSE BY TAG
    Network Security,   Network Protocols and Security,   Enterprise Network Security,   VIEW ALL TAGS

    Digg This!    StumbleUpon Toolbar StumbleUpon    Bookmark with Delicious Del.icio.us   



    RELATED CONTENT
    Network Security
    How to set up a split-tunnel VPN in Windows Vista
    What is the difference between static and dynamic network validation?
    Port scan attack prevention best practices
    Securing the intranet with remote access VPN security
    How to prevent network sniffing and eavesdropping
    How to implement virtual firewalls in a complex network infrastructure
    How to manage network bandwidth with distributed ISP bandwidth
    How to edit group policy objects to give a user local admin rights
    How to prevent operating system cloning with AES 256-bit encryption
    How to securely connect a LAN POS to a remote point-of-sale device

    Network Protocols and Security
    Expert calls SSL protocol vulnerability a non issue
    How to prevent phishing attacks with social engineering tests
    How SSL-encrypted Web connections are intercepted
    DNSSEC deployment challenges can be overcome
    Microsoft issues SMB vulnerability advisory, patch pending
    Microsoft repairs Windows media, TCP/IP vulnerabilities
    How to test IPv6 infrastructures
    DNSSEC deployments gain momentum since Kaminsky DNS bug
    Kaminsky interview: DNSSEC addresses cross-organizational trust and security
    How to create secure Windows FTP automation

    RELATED GLOSSARY TERMS
    Terms from Whatis.com − the technology online dictionary
    5 terms you need to know before you employ VoIP  (SearchSecurity.com)
    digest authentication  (SearchSecurity.com)
    IGP  (SearchSecurity.com)
    IP spoofing  (SearchSecurity.com)
    Secure Sockets Layer  (SearchSecurity.com)
    smurfing  (SearchSecurity.com)
    Transport Layer Security  (SearchSecurity.com)

    RELATED RESOURCES
    2020software.com, trial software downloads for accounting software, ERP software, CRM software and business software systems
    Search Bitpipe.com for the latest white papers and business webcasts
    Whatis.com, the online computer dictionary



    Search and Browse the Expert Answer Center
    Search and browse more than 25,000 question and answer pairs from more than 250 TechTarget industry experts.
    Browse our Expert Advice



    Find Security Solutions for Your Business
    TechTarget Security Media
    Information Security View this month\\'s issue and subscribe today.
    Information Security Decisions Apply online for free conference admission.
    SearchSecurity.com
    HomeNewsMagazineMultimediaWhite PapersLearningAdviceTopicsEventsAbout Us

    About Us  |  Contact Us  |  For Advertisers  |  For Business Partners  |  Site Index  |  RSS
    TechTarget provides technology professionals with the information they need to perform their jobs - from developing strategy, to making cost-effective purchase decisions and managing their organizations' technology projects - with its network of technology-specific websites, events and online magazines.

    TechTarget Corporate Web Site  |  Media Kits  |  Site Map




    All Rights Reserved, Copyright 2003 - 2009, TechTarget | Read our Privacy Policy
      TechTarget - The IT Media ROI Experts