Re: ports 111, 113, and 119

["Mikkel L. Ellertson" <mikkel Infinity-ltd com>]

On Thu, 31 May 2001, Statux wrote:

> 111: I was once told that sunrpc is required for a lot of stuff to run and
> should be left alone.
>
Port 111 should almost never be left open to the Internet!  It is used
for lots of things, like NFS, snmp, ypbind, etc.  But you normaly do not
want any of these services accessable from the Internet.
>
> 113: identd is required by a ton of stuff you connect to (including IRC).
> leave this running.
>
> 119: This is nntp, enabled via /etc/inetd.conf or xinetd. If you don't run
> a news server.. disable it right away.
>
> Unless you have a case where a port is open but nothing is running on it
> (the tcp wrapper (tcpd) does this), it's usually just a case of keeping
> all your packages 100% up-to-date and ahead of the exploits.
>
>
Mikkel
-- 

    Do not meddle in the affairs of dragons,
 for you are crunchy and taste good with ketchup.