On 2011-11-22, Sthu Deus <sthu.d...@gmail.com> wrote:
>
> My opinion is this: to disable any queries to Your host by iptables
> and/or xinit from outside world and then purge the packages You do not
> need.
>
This is a stand alone machine that's not supposed to be offering any
services whatsoever to the outside world.  I've gotten rid of avahi and
portmap; what's left is cups (listening uniquely on the loopback
interface, at least I hope) and dhclient.

einstein:/home/curty# lsof -i
COMMAND   PID  USER   FD   TYPE DEVICE SIZE/OFF NODE NAME
cupsd    1778  root    5u  IPv6  43230      0t0  TCP localhost:ipp (LISTEN)
cupsd    1778  root    7u  IPv4  43231      0t0  TCP localhost:ipp (LISTEN)
dhclient 1814  root    6u  IPv4   6366      0t0  UDP *:bootpc 
<snipped the rest--browser(chrome) and slrn>.

I don't want to run a firewall because I don't what I'm doing and am too
ignorant to set up cupsd and dhclient securely. I think I'm running cups
securely.  If I should do something about dhclient (udp, not tcp) please
be so kind as to tell me what.


-- 
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: http://lists.debian.org/slrnjcpns0.33c.cu...@einstein.electron.org

Reply via email to