I have these services opened in my inetd.conf file.
Does the following output from the nightly security warnings
seem reasonable/correct (port 32668 and 448) ? 

BTW, telnet and ftp are IP restricted (for backup access) and I do use ssh.

Security Warning: There is modifications for port listening on your machine :
-  Opened ports : tcp     0   0 *:auth         *:*    LISTEN   32668/inetd
-  Opened ports : tcp     0   0 *:pop3         *:*    LISTEN   32668/inetd
-  Opened ports : tcp     0   0 *:telnet       *:*    LISTEN   32668/inetd
-  Opened ports : tcp     0   0 *:ftp          *:*    LISTEN   32668/inetd
- Closed ports  : tcp     0   0 *:auth         *:*    LISTEN   448/inetd
- Closed ports  : tcp     0   0 *:pop3         *:*    LISTEN   448/inetd
- Closed ports  : tcp     0   0 *:telnet       *:*    LISTEN   448/inetd
- Closed ports  : tcp     0   0 *:ftp          *:*    LISTEN   448/inetd

---------------------------------
And why are these showing up...
I changed permissions for postfix but it seems to break it.  So why does
the security check expect these to not be world writeable ?

Security Warning: World Writeable files found :
                - /tmp
                - /tmp/.X11-unix
                - /tmp/.font-unix
                - /tmp/.font-unix/fs-1
                - /var/spool/postfix/maildrop
                - /var/spool/postfix/private/bounce
                - /var/spool/postfix/private/bsmtp
                - /var/spool/postfix/private/cleanup
                - /var/spool/postfix/private/cyrus
                - /var/spool/postfix/private/defer
                - /var/spool/postfix/private/error
                - /var/spool/postfix/private/ifmail
                - /var/spool/postfix/private/local
                - /var/spool/postfix/private/rewrite
                - /var/spool/postfix/private/smtp
                - /var/spool/postfix/private/uucp
                - /var/spool/postfix/public/pickup
                - /var/spool/postfix/public/qmgr
                - /var/spool/postfix/public/showq
                - /var/tmp

Thanks... Dan.


Reply via email to