-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Well,111 is the portmap port..carefully,its a gate for intrusion with rpc attacks.. you must disable portmap. try something like "update-rc -f remove portmap" or "update-rc -f portmap remove" i forgot..
if that doesn work try blocking ports vias ipchains with something like "/sbin/ipchains -s 0/0 -d MY_MACHINE_IP 111 -p tcp -j DENY -l" cya Petre L. Daniel Linux Administrator,Canad Systems Pitesti http://www.cyber.ro email:[EMAIL PROTECTED] phone: +4048220044,+4048206200 - -----Mesaj original----- De la: J. Paul Bruns-Bielkowicz [mailto:[EMAIL PROTECTED] Trimis: Tuesday, December 04, 2001 12:18 PM Către: debian-security@lists.debian.org Subiect: How do I disable (close) ports? Hi, I disabled all but a few ports in /etc/services, but I have tcp 0 0 pa237.olsztyn.sdi.t:111 80.116.215.37:1064 ESTABLISHED when I netstat my machine. What exactly does this mean? I just want 25/tcp open smtp 37/tcp open time 66/tcp open sql*net 80/tcp open http 110/tcp open pop-3 443/tcp open https 3306/tcp open mysql open. How can I close ports 111 and 859? They are not enabled in /etc/services Thanks, J. Paul Bruns-Bielkowicz http://www.america.prv.pl - -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED] -----BEGIN PGP SIGNATURE----- Version: PGPfreeware 7.0.3 for non-commercial use <http://www.pgp.com> iQA/AwUBPA3VnSVopXqImSTYEQLWmACfeHFgiD5RXNVZlkTQR2TzJqAEiAAAn2Rl dDQS28W+nY02Y6QyAN+NwrOU =XZqf -----END PGP SIGNATURE-----
