Communication Port Questions

[RodG]

Hi -

Our host doesn't open TCP port 1129 on their shared hosting sites because of the security issues with opening additional ports. Because like us, so many small businesses cannot afford Virtual Private Servers or Managed Hosting, I was hoping Zen Cart was able to take the security on shared hosting into account and offer alternative ports. Is there is a way to reconfigure Zen cart to use port 443 or 80, which our host has recommended?

We used a different paid cart before and there were no port issues. I have used Zen Cart in the past (long past, 2008!) when I freelanced for a discount web hosting/design company as a designer, and the hosting solution we put the carts on was shared hosting, but I don't know about the ports as the company set them up, we just customized the interface. This is my first time installing the SSL and setting up a Gateway API (we are using FirsrData Global), and I want to get it right on the first go!

Thanks so much for your support.

The site is at http://shop.bunkerhilldvd.com (the SSL cert is still pending, so no https:// yet). </p>

Lynda Williams
Webmaster, Light a Candle Films LLC

A stock Zencart doesn't use port 1129 for anything. It only uses the standard ports 80 for http and 443 for https.

Also, your host is being a bit of an anal idiot for not opening up this port (when needed for for secure communications to the Linkpoint API, and possibly others) because of 'Security issues'. If they spend 5 minutes doing a little research they'd realise that there is often a need for this port to be open to *increase* security.
It is their refusal to do so that will *decrease* security, because some people (such as myself) will go as far to set up an insecure 'tunnel' to bypass such an anal restriction.

This is right up there with some hosts the refuse to allow 'sFTP' because of 'security issues', but happily embrace and encourage the use of the insecure regular FTP.

Simply put, they are afraid of what they don't understand. <sigh>

Cheers
RodG
adv dip network security

ps: They'll only need to open port 1129 for *outgoing* traffic. THe incoming will/should automatically be allowed due to 'connection tracking'