Communication Port Questions

[Lynda1952]

Hi -

Our host doesn't open TCP port 1129 on their shared hosting sites because of the security issues with opening additional ports. Because like us, so many small businesses cannot afford Virtual Private Servers or Managed Hosting, I was hoping Zen Cart was able to take the security on shared hosting into account and offer alternative ports. Is there is a way to reconfigure Zen cart to use port 443 or 80, which our host has recommended?

We used a different paid cart before and there were no port issues. I have used Zen Cart in the past (long past, 2008!) when I freelanced for a discount web hosting/design company as a designer, and the hosting solution we put the carts on was shared hosting, but I don't know about the ports as the company set them up, we just customized the interface. This is my first time installing the SSL and setting up a Gateway API (we are using FirsrData Global), and I want to get it right on the first go!

Thanks so much for your support.

The site is at http://shop.bunkerhilldvd.com (the SSL cert is still pending, so no https:// yet). </p>

Lynda Williams
Webmaster, Light a Candle Films LLC

[RodG]

Hi -

Our host doesn't open TCP port 1129 on their shared hosting sites because of the security issues with opening additional ports. Because like us, so many small businesses cannot afford Virtual Private Servers or Managed Hosting, I was hoping Zen Cart was able to take the security on shared hosting into account and offer alternative ports. Is there is a way to reconfigure Zen cart to use port 443 or 80, which our host has recommended?

We used a different paid cart before and there were no port issues. I have used Zen Cart in the past (long past, 2008!) when I freelanced for a discount web hosting/design company as a designer, and the hosting solution we put the carts on was shared hosting, but I don't know about the ports as the company set them up, we just customized the interface. This is my first time installing the SSL and setting up a Gateway API (we are using FirsrData Global), and I want to get it right on the first go!

Thanks so much for your support.

The site is at http://shop.bunkerhilldvd.com (the SSL cert is still pending, so no https:// yet). </p>

Lynda Williams
Webmaster, Light a Candle Films LLC

A stock Zencart doesn't use port 1129 for anything. It only uses the standard ports 80 for http and 443 for https.

Also, your host is being a bit of an anal idiot for not opening up this port (when needed for for secure communications to the Linkpoint API, and possibly others) because of 'Security issues'. If they spend 5 minutes doing a little research they'd realise that there is often a need for this port to be open to *increase* security.
It is their refusal to do so that will *decrease* security, because some people (such as myself) will go as far to set up an insecure 'tunnel' to bypass such an anal restriction.

This is right up there with some hosts the refuse to allow 'sFTP' because of 'security issues', but happily embrace and encourage the use of the insecure regular FTP.

Simply put, they are afraid of what they don't understand. <sigh>

Cheers
RodG
adv dip network security

ps: They'll only need to open port 1129 for *outgoing* traffic. THe incoming will/should automatically be allowed due to 'connection tracking'

[Lynda1952]

A stock Zencart doesn't use port 1129 for anything. It only uses the standard ports 80 for http and 443 for https.

<snip></snip>

ps: They'll only need to open port 1129 for *outgoing* traffic. THe incoming will/should automatically be allowed due to 'connection tracking'

The FAQ here for installing the FirstGlobal (Linkpoint) API does say that TCP port 1129 is used for outgoing communication and must be open.

Also, there is a discussion at http://www.zen-cart.com/showthread.p...onnect-to-host that says the same thing, where several people report getting that Failure message when submitting test orders. They are all told the same thing - port 1129 must be open in order to submit orders through the Gateway.

I'm trying to be proactive before the API in installed in order to avoid avoid Failure 7 when I submit a test order. And whether or not our host is being too anal about the port, the fact remains that they will not open it on their shared hosting platform.

So I probably should have phrased the question as, "Is there is a way to reconfigure Zen cart to use port 443 or 80 for outgoing traffic, which our host has recommended?"

And meanwhile, armed with the excellent information in this response, I will contact them and push for opening Port 1129 for outgoing traffic only. If the port isn't open for incoming traffic, even I can see that it can't possibly be a security issue.

Thanks again!

[kobra]

Sounds like you are with GoDaddy - - You should really consider another host

[Lynda1952]

Sounds like you are with GoDaddy - - You should really consider another host

Yes, I understand, but this is a client site and he's not willing to move.