Re: ports 111, 113, and 119

[LuisMi <luismi adpsoft com>]

check cert.org for security risks for the 111 port

-- 

LuisMi

--------------------------------------------------------------
Please answer me in text plain and use spanish if you can/want.
Also please reply with the original text and subject.
e-mail powered by Pine

On Thu, 31 May 2001, Mikkel L. Ellertson wrote:

> On Thu, 31 May 2001, Statux wrote:
>
> > 111: I was once told that sunrpc is required for a lot of stuff to run and
> > should be left alone.
> >
> Port 111 should almost never be left open to the Internet!  It is used
> for lots of things, like NFS, snmp, ypbind, etc.  But you normaly do not
> want any of these services accessable from the Internet.
> >
> > 113: identd is required by a ton of stuff you connect to (including IRC).
> > leave this running.
> >
> > 119: This is nntp, enabled via /etc/inetd.conf or xinetd. If you don't run
> > a news server.. disable it right away.
> >
> > Unless you have a case where a port is open but nothing is running on it
> > (the tcp wrapper (tcpd) does this), it's usually just a case of keeping
> > all your packages 100% up-to-date and ahead of the exploits.
> >
> >
> Mikkel
>