Re: Newbie - wants to close ports - port scans

2002-09-30 Thread Phillip Hofmeister
On Mon, 30 Sep 2002 at 03:50:35AM -0700, Alvin Oga wrote: > but i wanna be able to saywishfully... if you attempt any real illegal > connections, that you're caught ... within a few minutes... and off we go > to lawyers ... Actually, several Federal Courts have held port scanning does not con

Re: Newbie - wants to close ports - port scans

2002-09-30 Thread Phillip Hofmeister
On Mon, 30 Sep 2002 at 03:50:35AM -0700, Alvin Oga wrote: > but i wanna be able to saywishfully... if you attempt any real illegal > connections, that you're caught ... within a few minutes... and off we go > to lawyers ... Actually, several Federal Courts have held port scanning does not co

Re: Newbie - wants to close ports - port scans

2002-09-30 Thread Alvin Oga
On Mon, 30 Sep 2002, Michael Renzmann wrote: > Hi. > > Zeno Davatz wrote: > > I am just gonna deinstall portsentry - why did I install it in the first > > place??? > > In order to get informed in cases when there are (more or less) obvious > port scans? :) i say scan the ports all you like .

Re: Newbie - wants to close ports

2002-09-30 Thread Riku Valli
sage ----- > From: "Zeno Davatz" <[EMAIL PROTECTED]> > To: > Sent: Monday, September 30, 2002 10:43 AM > Subject: Newbie - wants to close ports > > >> Hi List >> >> I am an newbie and done a nmap -v of my local maschine that is supposed to >>

Re: Newbie - wants to close ports

2002-09-30 Thread Zeno Davatz
On 30.9.2002 11:55 Uhr, "Michael Renzmann" <[EMAIL PROTECTED]> wrote: > In order to get informed in cases when there are (more or less) obvious > port scans? :) I admit - I can not really recall. Thanks for your help. Zeno

Re: Newbie - wants to close ports

2002-09-30 Thread Michael Renzmann
Hi. Zeno Davatz wrote: I am just gonna deinstall portsentry - why did I install it in the first place??? In order to get informed in cases when there are (more or less) obvious port scans? :) Bye, Mike

Re: Newbie - wants to close ports

2002-09-30 Thread Giacomo Mulas
On Mon, 30 Sep 2002, Zeno Davatz wrote: > It give me: > debian:/etc/snort# netstat -lnp|grep 79 > tcp0 0 0.0.0.0:79 0.0.0.0:* LISTEN > 303/portsentry > > And I also found follwoing article witch I think is very interesting: > > http://lists.debian.org/debian

Re: Newbie - wants to close ports

2002-09-30 Thread Zeno Davatz
On 30.9.2002 11:19 Uhr, "Tobias Overkamp" <[EMAIL PROTECTED]> wrote: > what does a > netstat -lnp|grep 79 > say to you? > You should see the process that binds to the port... Thanks - that is a nice command. It give me: debian:/etc/snort# netstat -lnp|grep 79 tcp0 0 0.0.0.0:79

Re: Newbie - wants to close ports

2002-09-30 Thread Tobias Overkamp
On Mon, Sep 30, 2002 at 11:03:17AM +0200, Zeno Davatz wrote: > On 30.9.2002 10:54 Uhr, "InfoEmergencias - Luis Gómez" > <[EMAIL PROTECTED]> wrote: > > > fingerd is the name of the package :) > Thanks for the hint. Tried that also: > debian:/etc# apt-get --purge remove fingerd > Reading Package Lis

Re: Newbie - wants to close ports

2002-09-30 Thread Zeno Davatz
On 30.9.2002 10:54 Uhr, "InfoEmergencias - Luis Gómez" <[EMAIL PROTECTED]> wrote: > fingerd is the name of the package :) Thanks for the hint. Tried that also: debian:/etc# apt-get --purge remove fingerd Reading Package Lists... Done Building Dependency Tree... Done Package fingerd is not installe

Re: Newbie - wants to close ports

2002-09-30 Thread Zeno Davatz
On 30.9.2002 10:26 Uhr, "Alvin Oga" <[EMAIL PROTECTED]> wrote: > looks like oyu didnt take care of inetd and other daemons That is why I want to take care of them now... > a start from this docs > http://www.debian.org/doc/manuals/securing-debian-howto/ Thanks for the link. > - turn off un-neede

Re: Newbie - wants to close ports

2002-09-30 Thread Zeno Davatz
system (Debian3.0) read > firewall and security HOWTOs and check Debians own document > http://www.debian.org/doc/manuals/securing-debian-howto/index.en.html Thanks for the link. Will read this once again. Zeno > - Original Message - > From: "Zeno Davatz" <[EMAIL

Re: Newbie - wants to close ports

2002-09-30 Thread Alvin Oga
hi ya looks like oyu didnt take care of inetd and other daemons a start from this docs http://www.debian.org/doc/manuals/securing-debian-howto/ rest of the "hardening howto" - turn off inetd - turn off un-needed daemons - turn off un-needed services - fix

Re: Newbie - wants to close ports - port scans

2002-09-30 Thread Alvin Oga
On Mon, 30 Sep 2002, Michael Renzmann wrote: > Hi. > > Zeno Davatz wrote: > > I am just gonna deinstall portsentry - why did I install it in the first > > place??? > > In order to get informed in cases when there are (more or less) obvious > port scans? :) i say scan the ports all you like

Re: Newbie - wants to close ports

2002-09-30 Thread Riku Valli
al Message - From: "Zeno Davatz" <[EMAIL PROTECTED]> To: Sent: Monday, September 30, 2002 10:43 AM Subject: Newbie - wants to close ports > Hi List > > I am an newbie and done a nmap -v of my local maschine that is supposed to > be put into the internet after I managed t

Re: Newbie - wants to close ports

2002-09-30 Thread Giacomo Mulas
On Mon, 30 Sep 2002, Zeno Davatz wrote: > That is exactly what I am trying to do: stop all unwanted services. To me it > seems more difficult to to do then so say... > > Can you give me a hint how to stop ie. tcpmux and finger? find out what processes are listening on those ports. You can do it,

Re: Newbie - wants to close ports

2002-09-30 Thread Zeno Davatz
On 30.9.2002 10:03 Uhr, "Christian Schuerer-Waldheim" <[EMAIL PROTECTED]> wrote: > Either stop all unused/unwanted services or use a firewall (iptables) to > protect your machine. That is exactly what I am trying to do: stop all unwanted services. To me it seems more difficult to to do then so say

Re: Newbie - wants to close ports

2002-09-30 Thread J.H.M. Dassen (Ray)
On Mon, Sep 30, 2002 at 09:43:34 +0200, Zeno Davatz wrote: > Can anyone give me a hint how to go about closing all the following port > execpt ssh, http, https? > 1524/tcp openingreslock > 12345/tcp openNetBus > 12346/tcp openNetBus > 27665/tcp openTrinoo_Maste

Re: Newbie - wants to close ports

2002-09-30 Thread Riku Valli
t: Monday, September 30, 2002 11:41 AM Subject: Re: Newbie - wants to close ports On 30.9.2002 10:22 Uhr, "Riku Valli" <[EMAIL PROTECTED]> wrote: > Disable services. Edited /etc/inetd.conf and add # to unwanted service or > use update-inetd program to complete task. Res

Re: Newbie - wants to close ports

2002-09-30 Thread Zeno Davatz
On 30.9.2002 11:55 Uhr, "Michael Renzmann" <[EMAIL PROTECTED]> wrote: > In order to get informed in cases when there are (more or less) obvious > port scans? :) I admit - I can not really recall. Thanks for your help. Zeno -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsu

Newbie - wants to close ports

2002-09-30 Thread Zeno Davatz
Hi List I am an newbie and done a nmap -v of my local maschine that is supposed to be put into the internet after I managed to close all the necessary ports. Can anyone give me a hint how to go about closing all the following port execpt ssh, http, https? Port State Service 1/tcp

Re: Newbie - wants to close ports

2002-09-30 Thread Michael Renzmann
Hi. Zeno Davatz wrote: > I am just gonna deinstall portsentry - why did I install it in the first > place??? In order to get informed in cases when there are (more or less) obvious port scans? :) Bye, Mike -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Troubl

Re: Newbie - wants to close ports

2002-09-30 Thread Giacomo Mulas
On Mon, 30 Sep 2002, Zeno Davatz wrote: > It give me: > debian:/etc/snort# netstat -lnp|grep 79 > tcp0 0 0.0.0.0:79 0.0.0.0:* LISTEN > 303/portsentry > > And I also found follwoing article witch I think is very interesting: > > http://lists.debian.org/debia

Re: Newbie - wants to close ports

2002-09-30 Thread Zeno Davatz
On 30.9.2002 11:19 Uhr, "Tobias Overkamp" <[EMAIL PROTECTED]> wrote: > what does a > netstat -lnp|grep 79 > say to you? > You should see the process that binds to the port... Thanks - that is a nice command. It give me: debian:/etc/snort# netstat -lnp|grep 79 tcp0 0 0.0.0.0:79

Re: Newbie - wants to close ports

2002-09-30 Thread Tobias Overkamp
On Mon, Sep 30, 2002 at 11:03:17AM +0200, Zeno Davatz wrote: > On 30.9.2002 10:54 Uhr, "InfoEmergencias - Luis Gómez" > <[EMAIL PROTECTED]> wrote: > > > fingerd is the name of the package :) > Thanks for the hint. Tried that also: > debian:/etc# apt-get --purge remove fingerd > Reading Package Li

Re: Newbie - wants to close ports

2002-09-30 Thread Zeno Davatz
On 30.9.2002 10:54 Uhr, "InfoEmergencias - Luis Gómez" <[EMAIL PROTECTED]> wrote: > fingerd is the name of the package :) Thanks for the hint. Tried that also: debian:/etc# apt-get --purge remove fingerd Reading Package Lists... Done Building Dependency Tree... Done Package fingerd is not install

Re: Newbie - wants to close ports

2002-09-30 Thread Zeno Davatz
On 30.9.2002 10:26 Uhr, "Alvin Oga" <[EMAIL PROTECTED]> wrote: > looks like oyu didnt take care of inetd and other daemons That is why I want to take care of them now... > a start from this docs > http://www.debian.org/doc/manuals/securing-debian-howto/ Thanks for the link. > - turn off un-need

Re: Newbie - wants to close ports

2002-09-30 Thread Zeno Davatz
OTECTED]> > To: <[EMAIL PROTECTED]> > Sent: Monday, September 30, 2002 10:43 AM > Subject: Newbie - wants to close ports > > >> Hi List >> >> I am an newbie and done a nmap -v of my local maschine that is supposed to >> be put into the internet

Re: Newbie - wants to close ports

2002-09-30 Thread Alvin Oga
hi ya looks like oyu didnt take care of inetd and other daemons a start from this docs http://www.debian.org/doc/manuals/securing-debian-howto/ rest of the "hardening howto" - turn off inetd - turn off un-needed daemons - turn off un-needed services - fi

Re: Newbie - wants to close ports

2002-09-30 Thread Riku Valli
al Message - From: "Zeno Davatz" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Monday, September 30, 2002 10:43 AM Subject: Newbie - wants to close ports > Hi List > > I am an newbie and done a nmap -v of my local maschine that is supposed to > be put into t

Re: Newbie - wants to close ports

2002-09-30 Thread Giacomo Mulas
On Mon, 30 Sep 2002, Zeno Davatz wrote: > That is exactly what I am trying to do: stop all unwanted services. To me it > seems more difficult to to do then so say... > > Can you give me a hint how to stop ie. tcpmux and finger? find out what processes are listening on those ports. You can do it,

Re: Newbie - wants to close ports

2002-09-30 Thread Zeno Davatz
On 30.9.2002 10:03 Uhr, "Christian Schuerer-Waldheim" <[EMAIL PROTECTED]> wrote: > Either stop all unused/unwanted services or use a firewall (iptables) to > protect your machine. That is exactly what I am trying to do: stop all unwanted services. To me it seems more difficult to to do then so sa

Re: Newbie - wants to close ports

2002-09-30 Thread J.H.M. Dassen (Ray)
On Mon, Sep 30, 2002 at 09:43:34 +0200, Zeno Davatz wrote: > Can anyone give me a hint how to go about closing all the following port > execpt ssh, http, https? > 1524/tcp openingreslock > 12345/tcp openNetBus > 12346/tcp openNetBus > 27665/tcp openTrinoo_Mast

Newbie - wants to close ports

2002-09-30 Thread Zeno Davatz
Hi List I am an newbie and done a nmap -v of my local maschine that is supposed to be put into the internet after I managed to close all the necessary ports. Can anyone give me a hint how to go about closing all the following port execpt ssh, http, https? Port State Service 1/tcp