Re: Services/ports/init.d etc.. (not /etc :-)

2000-07-25 Thread Roy Harrison
thanks marisa. I have a port 1024 open -tcp- unknown. How do you find out what process has a port when it says unknown.. Thanks Roy At 11:59 AM 07/25/2000 -0700, you wrote: >identd is located in /usr/sbin if their aren't any links to it. it is also >possible that ident was started from within

Re: Services/ports/init.d etc.. (not /etc :-)

2000-07-25 Thread Marisa Mack
identd is located in /usr/sbin if their aren't any links to it. it is also possible that ident was started from within inet, to see if this is the case, check /etc/inetd.conf to see if identd is commented out or not. marisa On Tue, Jul 25, 2000 at 11:50:55AM -0700, royhar sed: > Easy for you to

Re: Services/ports/init.d etc.. (not /etc :-)

2000-07-25 Thread Roy Harrison
Easy for you to say :-) There isn't any file identd in /etc/rc.d/init.d. There's also no process identd running on the system. Yet nmap shows port 113 AUTH as being active. Strange..very strange Roy >This is an easy one. You are looking for the identd program. It is >started from /etc/rc.

Re: Services/ports/init.d etc.. (not /etc :-)

2000-07-21 Thread John Aldrich
On Fri, 21 Jul 2000, Roy Harrison wrote: > > Thanks Mikkel > > Are there any security reasons to close this ? > Are you doing something which would require authentication using "ident"? If not, close it. My understanding is there are exploits for "ident" involving buffer over-runs, etc.

Re: Services/ports/init.d etc.. (not /etc :-)

2000-07-21 Thread Roy Harrison
> >This is an easy one. You are looking for the identd program. It is >started from /etc/rc.d/init.d/identd (Actualy the symlinks to it...) > From man identd: > >identd operates by looking up specific TCP/IP connections >and returning the user name of the process owning the con

Re: Services/ports/init.d etc.. (not /etc :-)

2000-07-20 Thread Marisa Mack
auth is your ident service - identd On Thu, Jul 20, 2000 at 02:15:47PM -0700, royhar sed: > Thanks for the reply... I like that ntsysv utility. There's something like > it using linuxconf but it doesn't show multiple runlevels. Thanks. > > I got all but one of them. I still am still unable to f

Re: Services/ports/init.d etc.. (not /etc :-)

2000-07-20 Thread Chuck Mead
Is there some reason why I am being cc'd directly on these emails? List mail is quite enough for me and I did not ask the question in the first place. On Thu, Jul 20, 2000 at 05:59:13PM -0500, Mikkel L. Ellertson was heard to say: > On Thu, 20 Jul 2000, Roy Harrison wrote: > > > Thanks for the

Re: Services/ports/init.d etc.. (not /etc :-)

2000-07-20 Thread Mikkel L. Ellertson
On Thu, 20 Jul 2000, Roy Harrison wrote: > Thanks for the reply... I like that ntsysv utility. There's something like > it using linuxconf but it doesn't show multiple runlevels. Thanks. > > I got all but one of them. I still am still unable to figure out what auth > on port 113 is or what ser

Re: Services/ports/init.d etc.. (not /etc :-)

2000-07-20 Thread Roy Harrison
Thanks for the reply... I like that ntsysv utility. There's something like it using linuxconf but it doesn't show multiple runlevels. Thanks. I got all but one of them. I still am still unable to figure out what auth on port 113 is or what service, or process that's running it or starts it. Th

Re: Services/ports/init.d etc.. (not /etc :-)

2000-07-19 Thread Chuck Mead
On Wed, Jul 19, 2000 at 03:24:19PM -0700, Roy Harrison was heard to say: > is there a definitive place where I can find what particular services do > and where they are started ? > > I have the following running (result of nmap) and would like to clean it up > more. specifically auth (if it's

Services/ports/init.d etc.. (not /etc :-)

2000-07-19 Thread Roy Harrison
is there a definitive place where I can find what particular services do and where they are started ? I have the following running (result of nmap) and would like to clean it up more. specifically auth (if it's not critical) ,nntp,netbios-ssn and printer. PortState Protocol Service