Opening/Closing Ports in Backtrack 4

[lupin]

so just to be clear, If I attack a system on a completly different network and I want the Payload and Listener to use port e.g. 4444 I will have to forward it?

If the handler system does not have an Internet routable IP address (and has its address translated via NAT/PAT on a router to allow communication to the Internet), AND the system beign attacked is on the other side of that NAT translating gateway, then yes. Again, read up on TCP/IP.

[Nikolas]

VERY LAST QUESTION AND I SWEAR I'M DONE TAKING UP YOUR TIME: (thanks for being so helpful)
The Social Engineering Toolkit in BT4 has the abilty to generate a 'website' which when browsed asks the victim sign a Java request, thingy (not sure what its supposed to be and if they sign it a payload is delivered. I tried this on my LAN and it worked, the victim must browse http://192.168.1.103:80 but if I want to target somone outside of my LAN if had to put my internal IP and in theory it should be possible to asign http://[My Internal IP]:[port] a hostname! E.g www.webpage.subdomain.com but since I have a dynamic IP it will eventually change, so when it does won't the hostname be invalid? Since I no longer have the IP the hostname was registered to?

[lupin]

VERY LAST QUESTION AND I SWEAR I'M DONE TAKING UP YOUR TIME: (thanks for being so helpful)
The Social Engineering Toolkit in BT4 has the abilty to generate a 'website' which when browsed asks the victim sign a Java request, thingy (not sure what its supposed to be and if they sign it a payload is delivered. I tried this on my LAN and it worked, the victim must browse http://192.168.1.103:80 but if I want to target somone outside of my LAN if had to put my internal IP and in theory it should be possible to asign http://[My Internal IP]:[port] a hostname! E.g www.webpage.subdomain.com but since I have a dynamic IP it will eventually change, so when it does won't the hostname be invalid? Since I no longer have the IP the hostname was registered to?

I guess me telling you to read up on TCP/IP is beginning to seem a little redundant by now...

Dynamic DNS.