Open ports security

2001-01-26 Thread Brooks R. Robinson
Greetings, A quick question, if you please. I am trying to tighten up security on a box that may be exposed to some security risk. In doing so, I have been trying to get rid of anything that might prove detrimental to security (ftpd, telnetd, and other things). I have been running nmap

Re: Open ports security

2001-01-26 Thread Dave Sherohman
On Fri, Jan 26, 2001 at 08:28:51AM -0600, Brooks R. Robinson wrote: But what about 111? Something in my gut says that remote procedure call can't be all that good. NIS and NFS need sunrpc (aka portmapper) running on the server, but you should be able to shut it off if you're not using either

Re: Open ports security

2001-01-26 Thread Noah L. Meyerhans
On Fri, Jan 26, 2001 at 08:28:51AM -0600, Brooks R. Robinson wrote: machine, and I've come down to just a few open ports left that I have at least mild concern about. They are: 9 discard 13daytime 37time 111 sunrpc Now, I know that 9 will just throw away anything it

RE: Open ports security

2001-01-26 Thread Brooks R. Robinson
Port 111 is the portmap daemon, used by NFS and NIS (anything else?). It doesn't look like you're using NFS or NIS (if so you'd have other ports open) so you can probably shut it off. If you do want to keep it on, it might be worth it to use something like ipchains or iptables to filter

RE: Open ports security

2001-01-26 Thread Brooks R. Robinson
I am not using NFS or NIS, and I have started to hunt down how/where to turn off portmap. Hmmm... I check out things in /etc/init.d. Ahh... mountnfs.sh! But wait! I read through the script It shouldn't be on! There's nothing to turn it on. You know, I should really look at the