Type netstat -a -p, it tells which services are running on which ports. 
Ignore the Unix sockets section.
Good reading Building Internet Firewalls an O'Reilly book (theory) and 
Linux Firewalls a New Riders book (very good implementation book, although 
it uses old kernel, that is ipchains instead of iptables. you can convert 
the rules though).
Good luck,
Ryan
> On 4 Mar 2001, Dominic Mitchell wrote:
> 
>>
>> Hi,
>>
>> Ok, I am making a firewall fast before I get hit. I downloaded
>> pmfirewall-1.1.14 which is very easy to configure --- it is
>> targeted for users with low knowledge of ipchains et al ... me :(
>>
>> I will take some time to read the Howto, but it possible just to tweak
>> the firewall.
>>
>> For now I need to know which services are running and on which
>> port.  I am not running a server, thus I have disabled the telnet,
>> ftp, services. I know that sendmail (smtp) is runnung on port 25, but
>> my knowledge is limited.  How can I find this information
>> quickly?
>>
>> Thanks,
>>
>> Dominic.
>>
> To find out what services use what ports, look in /etc/services.
> To see what ports you need open, start by closing off all the
> privelaged ports, and then open the ones you need for the services you
> connect to the net to use.
> 
> Blocking 0 to 1023 is a good start.  Then open up 25 if you are running
> a mail server.  If you do not run a local name server, then you will
> need port 53 open.  I have not used pmfirewall, but it will probably
> walk you through what ports to leave open by asking you about the
>services you use.  It will probably also limit connections to some
>services to specific computers...
> 
> Mikkel
>  --
> 
>     Do not meddle in the affairs of dragons,
>  for you are crunchy and taste good with ketchup.
> 
> 
> 
> _______________________________________________
> Redhat-list mailing list
> [EMAIL PROTECTED]
> https://listman.redhat.com/mailman/listinfo/redhat-list




_______________________________________________
Redhat-list mailing list
[EMAIL PROTECTED]
https://listman.redhat.com/mailman/listinfo/redhat-list

Reply via email to