Front cover - IBM Redbooks

10.3.2 Notes security
meant to provide. Closing all other ports prevents well-known attacks from the
being conducted.
To determine the ports that should remain open and those that should be closed,
we recommend the use of the “Network Mapper” tool NMap. It can be found at
the following URL:
http://www.insecure.org/nmap/
Nmap is an open source utility for network exploration or security auditing. It was
designed to rapidly scan large networks, although it works fine against single
hosts. Nmap uses raw IP packets in novel ways to determine what hosts are
available on the network, what services (ports) they are offering, what operating
system (and OS version) they are running, what types of packet filters and
firewalls are in use, and dozens of other characteristics. Nmap runs on most
types of computers, and both console and graphical versions are available.
Nmap is free software, available with full source code under the terms of the
GNU GPL.
Notes security concerns itself with the protection of the Domino server, the Notes
databases it contains, and the data contained within those Notes databases, as
shown in Figure 10-6.
Figure 10-6 Notes security
The elements of Notes security are described in this section.
Chapter 10. The Notes/Domino security model 421