Hi Keith, I'm glad your problem was solved! Hi Dan, I do agree that iptables is awesome to stop all that traffic, including other packages that may be installed in the future, so extra bonus there! I noticed this small difference in how I would implement the iptables command: Using -A adds the new rule to the end of the INPUT chain. If there's already a rule in INPUT that would match and ACCEPT, then adding that rule to the end would be useless because iptables would never get to that line to drop all port 21. By using -I (to insert it at the top) instead of -A, this problem is completely avoided: iptables -A INPUT -p tcp --dport 21 -j REJECT changes to: iptables -I INPUT -p tcp --dport 21 -j REJECT Regards, Kaia Taylor DevSA group -- tis-dco-devsa - jumpword devsa http://dco-sps.schwab.com/sites/devsa/welcome <http://dco-sps.schwab.com/sites/devsa/welcome> desk 602-977-5157 pager 6025785...@vtext.com or white pages <blocked::http://wp.schwab.com/pogo/searchpopup.do?applicationFrom=OTHER S&searchOn=LAST_FIRST_ATTR&searchValue=Taylor, kaia> All e-mail sent to or from this address will be received by the Charles Schwab corporate e-mail system and is subject to archival and review by someone other than the recipient.
________________________________ From: plug-discuss-boun...@lists.plug.phoenix.az.us [mailto:plug-discuss-boun...@lists.plug.phoenix.az.us] On Behalf Of Dan Dubovik Sent: Wednesday, June 23, 2010 7:28 PM To: Main PLUG discussion list Subject: Re: Determin which FTP server is running and turn off non secure FTP FTP control channel is on port 21, data is on 20 (for active ftp). SFTP uses the SSH daemon, so runs on port 22. It has been my experience that the pure-ftpd init script is far from graceful, as Eric pointed out, the error that was given likely means that the service wasn't running. That, or it just couldn't find the pid file. lsof -i :21 will tell you the process (with pid) that is listening on port 21. You can then kill that process. Provided you have also used chkconfig to disable the service on startup, it will then effectively be stopped from running. The rpm -e or yum remove commands listed above will make doubly sure that the service won't be started up again on the server. Additionally, you could use iptables to disable any connection to port 21 on the server : /sbin/iptables -A INPUT -p tcp --dport 21 -j REJECT I think that should stop incoming connections on the port. -- Dan.
--------------------------------------------------- PLUG-discuss mailing list - PLUG-discuss@lists.plug.phoenix.az.us To subscribe, unsubscribe, or to change your mail settings: http://lists.PLUG.phoenix.az.us/mailman/listinfo/plug-discuss
