Re: Unidentified subject!

[Thomas O'Dowd <tom@example.com>]

Try matching these with program names (as root)

# netstat -anp -A inet

This should tell you what program is binding to the port, it may not be
nterm for example but something else. Once you find the program names,
then you'll find that services are started in either xinetd or in
the startup script under /etc/rc3.d if you're using runlevel 3.

Basically only run what you need and then firewall after that.

Tom.

On Sun, Aug 19, 2001 at 07:50:39PM -0500, David Eduardo Gomez Noguera wrote:
> Reply.
> 
> I actually used no options, and did it on localhost.
> 
> but the output about open ports is the same.
> Complete output is:
> Port       State       Service
> 7/tcp      open        echo                    
> 21/tcp     open        ftp                     
> 22/tcp     open        ssh                     
> 25/tcp     open        smtp                    
> 80/tcp     open        http                    
> 110/tcp    open        pop-3                   
> 111/tcp    open        sunrpc                  
> 113/tcp    open        auth                    
> 515/tcp    open        printer                 
> 587/tcp    open        submission              
> 1024/tcp   open        kdm                     
> 1026/tcp   open        nterm                   
> 3128/tcp   open        squid-http              
> 5432/tcp   open        postgres                
> 5680/tcp   open        canna                   
> 6000/tcp   open        X11    
> 
> Some of them are controlled by xinetd, but some are not, and some i had never heard of (kdm, nterm).
> Just wondering if someone know where can i block each of them, besides with iptables?
> 
> -- 
> ICQ: 15605359 Bicho
>                                   =^..^=
> First, they ignore you. Then they laugh at you. Then they fight you. Then you win. Mahatma Gandhi.
> ........Por que no pensaran los hombres como los animales? Pink Panther........
> -------------------------------$B5$8!BN$N0lCW(B------------------------------------
> $B=k$54($5$bH`4_$^$G!#(B
> $B%"%s(B $B%"%s(B $B%"%s(B $B$H$C$F$bBg9%$-(B
> 
> -----------------------------------------------------------------------
> Next Technical Meeting:  Sat, Sep 15 13:30-  (Location to be announced)
> Next Nomikai Meeting:    Fri, Oct 19 19:30-  Tengu Tokyo Eki-Mae
> -----------------------------------------------------------------------
> more info: http://www.tlug.gr.jp           Sponsor: Global Online Japan
> 

-- 
Thomas O'Dowd. - Nooping - http://nooper.com
tom@example.com - Testing - http://nooper.co.jp/labs