Werner Puschitz <[EMAIL PROTECTED]> writes:

> This command gives you a quick overview: netstat -at
> 

Connexions Internet actives (serveurs et établies)
Proto Recv-Q Send-Q Adresse locale          Adresse distante        Etat       
tcp        0      0 modemcable163.96-2:1777 news.videotron.net:nntp ESTABLISHED 
tcp        0  33016 modemcable163.96-2:6699 1Cust137.tnt1.trio:1818 ESTABLISHED 
tcp        0  29600 modemcable163.96-2:6699 ACAA4DF2.ipt.aol.c:2411 ESTABLISHED 
tcp        0  33784 modemcable163.96-2:6699 1Cust137.tnt1.trio:1722 ESTABLISHED 
tcp        0  34048 modemcable163.96-2:6699 1Cust137.tnt1.trio:1691 ESTABLISHED 

The one above are normal.  The news server I am connected to.  The
4 others are downloads from the napster network. I find these
below suspicious ...

tcp       81      0 modemcable163.96-2:1732 rsjohn-3.directcon.:ftp CLOSE_WAIT  
tcp        1      0 modemcable163.96-2:1731 rsjohn-3.directcon.:www CLOSE_WAIT  
tcp        1      0 modemcable163.96-2:1729 rsjohn-3.directcon.:www CLOSE_WAIT  
tcp        1      0 modemcable163.96-2:1728 rsjohn-3.directcon.:www CLOSE_WAIT  

What do they mean?

I forgot that after an upgrade I ahd too look at the /etc/services
... Doh! Some services I am not using are not closed!

Thanks,



> And the following command gives you some more information about
> which processes are listening on which ports.  lsof -a -i
> 
> Werner
> 
> 
> On 4 Mar 2001, Dominic Mitchell wrote:
> 
> > Hi,
> >
> > Ok, I am making a firewall fast before I get hit. I downloaded
> >pmfirewall-1.1.14 which is very easy to configure --- it is
> >targeted for users with low knowledge of ipchains et al ... me :(
> 
> >
> > I will take some time to read the Howto, but it possible just to
> 
> >tweak the firewall.
> >
> > For now I need to know which services are running and on which
> >port.  I am not running a server, thus I have disabled the
> >telnet, ftp, services. I know that sendmail (smtp) is runnung on
> >port 25, but my knowledge is limited.  How can I find this
> >information quickly?
> >
> > Thanks,
> >
> > Dominic.
> >
> >
> >
> >
> >
> >
> 

-- 
Dominic Mitchell



_______________________________________________
Redhat-list mailing list
[EMAIL PROTECTED]
https://listman.redhat.com/mailman/listinfo/redhat-list

Reply via email to