Portmapper

[widget <widget wurldlink net>]

Doing some archive reading, I see you suggest that with with ssh to turn
off port mapper.

how? and waht are the consequences? we do some pop, some web(apache with
some cgi), and majordomo

Also I just downloaded tripwire, I wonder are there others you would
recommend and any idea where to locate them, is appreciated.

Thanks

W

At 05:09 PM 3/10/99 -0500, you wrote:
>> # Shell, login, exec and talk are BSD protocols.
>> #
>> shell   stream  tcp     nowait  root    /usr/sbin/tcpd  in.rshd
>> login   stream  tcp     nowait  root    /usr/sbin/tcpd  in.rlogind
>If you are running ssh you can safely uncomment shell and login, they are
>used for rsh and rlogin connections.
>
>> #exec   stream  tcp     nowait  root    /usr/sbin/tcpd  in.rexecd
>> talk    dgram   udp     wait    root    /usr/sbin/tcpd  in.talkd
>> ntalk   dgram   udp     wait    root    /usr/sbin/tcpd  in.ntalkd
>> #dtalk  stream  tcp     waut    nobody  /usr/sbin/tcpd  in.dtalkd
>> 
>You can get rid of the talk daemon too -- it is used to communicate with
>another user on a unix system.
>
>> Is it safe to comment these out also? What does each do?
>> 
>> Second, can someone tell me how I can shutoff daemons (i.e. keep them from
>> running). I need to know what file to edit.
>> 
>You could use ntsysv to control which daemons are started automatically. 
>
>
>> Finally, the linux box does not share any resources over the network (i.e.
>> no drives). Can I turn off NFS file sharing? Will this prevent me form
>> accessing my cd-rom drive or other local resources? How do I turn it off?
>> 
>Yes you can turn of nfsd and the portmapper. If you do not envision using
>them on the machine you could even uninstall the rpms.
>
>Also I would recommend installing sentry (blocks portscanning attempts)
>and logcheck (looks for suspicious activity in the logs), rpms are
>available at http://rufus.w3.org
>Hope that helps,
>Stefan
>
>
>
>-- 
>  PLEASE read the Red Hat FAQ, Tips, Errata and the MAILING LIST ARCHIVES!
>		http://www.redhat.com http://archive.redhat.com
>         To unsubscribe: mail redhat-list-request redhat com with 
>                       "unsubscribe" as the Subject.
>
>
>