Re: securing the system, stopping unnecessary services and closing open ports.

2011-08-29 Thread Johann Spies
On Mon, Aug 29, 2011 at 02:46:52PM +0200, yudi v wrote: > > > Probably portmap... > > See if it's installed > $ dpkg --get-selections portmap > > If it is, and it bothers you, it can be removed - check and see if > anything > uses it:- > # apt-get -s remove portmap | le

Re: securing the system, stopping unnecessary services and closing open ports.

2011-08-29 Thread yudi v
> > Probably portmap... > > See if it's installed > $ dpkg --get-selections portmap > > If it is, and it bothers you, it can be removed - check and see if anything > uses it:- > # apt-get -s remove portmap | less > > If it's the only package to be removed:- > # apt-get --purge remove portmap > > Ch

Re: securing the system, stopping unnecessary services and closing open ports.

2011-08-29 Thread Scott Ferguson
On 29/08/11 18:35, yudi v wrote: I purged the above files but still have� the following service running. 111/tcp open� rpcbind -- Kind regards, Yudi Probably portmap... See if it's installed $ dpkg --get-selections portmap If it is, and it bothers you, it can be removed - check a

Re: securing the system, stopping unnecessary services and closing open ports.

2011-08-29 Thread yudi v
> > The following packages will be REMOVED: > cifs-utils libnfsidmap2 nfs-common nfs-kernel-server samba samba-common > samba-common-bin samba-doc smbclient smbfs swat winbind > 0 upgraded, 0 newly installed, 12 to remove and 4 not upgraded. > Remv smbfs [2:4.5-2] > Remv cifs-utils [2:4.5-2] >

Re: securing the system, stopping unnecessary services and closing open ports.

2011-08-28 Thread yudi v
> > # apt-get --purge remove libnfsidmap2 nfs-common samba > > if you don't use samba at all (cifs-utils samba samba-common > samba-common-bin smbfs) then change "samba" to "samba*" > > I'd suggest using -s instead of --purge first - just in case samba was > originally pulled in by another package

Re: securing the system, stopping unnecessary services and closing open ports.

2011-08-28 Thread yudi v
http://myip.dk/ will give you the remote access address. Just ssh to the displayed address. I'd suggest you try - it's easier than just believing everything you read on whirlpool. The signal to noise ratio there can be bad. Exetel have good tech support - Vodaphail don't even know where their tower

Re: securing the system, stopping unnecessary services and closing open ports.

2011-08-28 Thread Scott Ferguson
On 28/08/11 18:37, yudi v wrote: my system IP for ppp0 is 101.***.***.*** and it's not static. but from what I can remember all postpaid accounts in Australia have 10.***.***.*** addresses and are behind NAT. I've yet to see any (non-SLA business class) USB UMTS modems by any of the

Re: securing the system, stopping unnecessary services and closing open ports.

2011-08-28 Thread yudi v
> I use postpaid mobile broadband and my IP is both the system address and >> the gateway. There is no NAT with postpaid service, it's only available >> with prepaid in Australia. Not sure why. >> > > Not sure what you mean there I suspect you mean only postpaid allow a > static IP address (for

Re: securing the system, stopping unnecessary services and closing open ports.

2011-08-27 Thread Scott Ferguson
On 28/08/11 11:39, yudi v wrote: Just to clarify my post. This is a new install and I was a bit careless while installing. It has no data on it. I was more concerned with LUKS+LVM working at install. I did not realize I selected to install SSH, I do not use Samba or NFS not sure how those got ins

Re: securing the system, stopping unnecessary services and closing open ports.

2011-08-27 Thread yudi v
Just to clarify my post. This is a new install and I was a bit careless while installing. It has no data on it. I was more concerned with LUKS+LVM working at install. I did not realize I selected to install SSH, I do not use Samba or NFS not sure how those got installed. Again it might have been an

Re: securing the system, stopping unnecessary services and closing open ports.

2011-08-27 Thread Aniruddha
On Sat, Aug 27, 2011 at 5:05 PM, yudi v wrote: > Nmap suggests the following ports are open: > > 25/tcp open smtp > 111/tcp open rpcbind > 139/tcp open netbios-ssn > 445/tcp open microsoft-ds > 631/tcp open ipp > 901/tcp open samba-swat > 2049/tcp open nfs > > Which nmap command did

Re: securing the system, stopping unnecessary services and closing open ports.

2011-08-27 Thread Ralf Jung
Hi, > ipp is CUPS, the network printing server, and you know whether you need > that. Now that you mention it... I also see cups listening on all devices: $ sudo netstat -nlp Active Internet connections (only servers) Proto Recv-Q Send-Q Local Address Foreign Address State

Re: securing the system, stopping unnecessary services and closing open ports.

2011-08-27 Thread Gilbert Sullivan
On 08/27/2011 02:43 PM, Brian wrote: A natural history expedition searching for unicorns and dodos would have as much success as these two programs are likely to have. I was once on a natural history expedition. We found no unicorns, but we did find dodos. We weren't looking for them, but we

Re: securing the system, stopping unnecessary services and closing open ports.

2011-08-27 Thread Brian
On Sat 27 Aug 2011 at 17:16:16 +0100, Joe wrote: > On Sun, 28 Aug 2011 01:05:47 +1000 > yudi v wrote: > > > > how can I find out if this system has been compromised? > > You can try chkrootkit and rkhunter, but the latter at least works A natural history expedition searching for unicorns and d

Re: securing the system, stopping unnecessary services and closing open ports.

2011-08-27 Thread Brian
On Sun 28 Aug 2011 at 01:05:47 +1000, yudi v wrote: > Nmap suggests the following ports are open: > > 25/tcp open smtp > 111/tcp open rpcbind > 139/tcp open netbios-ssn > 445/tcp open microsoft-ds > 631/tcp open ipp > 901/tcp open samba-swat > 2049/tcp open nfs > > I run a desktop

Re: securing the system, stopping unnecessary services and closing open ports.

2011-08-27 Thread Chris Brennan
On 8/27/2011 11:38 AM, Brad Alexander wrote: > Ports 139, 445 and 901 are samba running. Port 631 is cups, your printer > driver. 111 and 2049 are for NFS. If you don't need them, you should be > able to turn them off...If you do need it, then you should be able to > firewall it, using iptables to

Re: securing the system, stopping unnecessary services and closing open ports.

2011-08-27 Thread Joe
On Sun, 28 Aug 2011 01:05:47 +1000 yudi v wrote: > Nmap suggests the following ports are open: > > 25/tcp open smtp > 111/tcp open rpcbind > 139/tcp open netbios-ssn > 445/tcp open microsoft-ds > 631/tcp open ipp > 901/tcp open samba-swat > 2049/tcp open nfs > > I run a desktop em

Re: securing the system, stopping unnecessary services and closing open ports.

2011-08-27 Thread Brad Alexander
Ports 139, 445 and 901 are samba running. Port 631 is cups, your printer driver. 111 and 2049 are for NFS. If you don't need them, you should be able to turn them off...If you do need it, then you should be able to firewall it, using iptables to limit access to the hosts or subnets you need. On S

securing the system, stopping unnecessary services and closing open ports.

2011-08-27 Thread yudi v
Nmap suggests the following ports are open: 25/tcp open smtp 111/tcp open rpcbind 139/tcp open netbios-ssn 445/tcp open microsoft-ds 631/tcp open ipp 901/tcp open samba-swat 2049/tcp open nfs I run a desktop email client that uses smtp apart from that I do not know why rest of the a

Re: closing open ports

2000-12-03 Thread Eric G . Miller
On Sun, Dec 03, 2000 at 04:31:18AM -0500, [EMAIL PROTECTED] wrote: > i just did an nmap to a machine i'm servicing and i have 2 open ports > that i cannot account for. they are: > PortState Protocol Service > 781 opentcphp-collector > 779 open

closing open ports

2000-12-03 Thread patd
i just did an nmap to a machine i'm servicing and i have 2 open ports that i cannot account for. they are: PortState Protocol Service 781 opentcphp-collector 779 openudpunknown looking at /etc/services 779/udp is for moir