Soooooo much open ports !!!

[Dave2001]

Hi Guys !

I have a problem ! I have run an portscan on my Debian testing box and it shows a lot of open ports . But i already commented everything out in the inetd.conf . I have tried to uncomment them in /etc/services but that just leaves them without a name .
Where else can i stop these ports ?

That are the ports 1,7,9,11,15,70,79,80,109,110,111, ....

Anybody help ?

David

[duckie]

Hmm..this is off of the top of my head, as I'm at work right now, and I can't get into my Linux box at home (which doesn't look like a good thing :/ ).

I know for my system (RH 6.2), just uncommenting everything in inetd.conf, restarting inet, and shutting down all other services I don't need in /etc/rc.d/init.d/ works fine for me. I'm sure there's another way to get around that, but I've just been too lazy to find it.

Did you restart inet after uncommenting the inetd.conf file?

What I do know definitely right now, port 80 is http..you might have Apache running, so shut down httpd if you don't want / need a webserver running.

Port 110 looks like a POP server, as I gathered from a quick search on Google.

Port 111 is portmapper.

Port 7 is echo, 79 is finger..both are in inetd.conf for me..I don't know how you'd shut those down if you've already restarted inet with no success.

If you can find where the scripts are for those (since you said you're running Debian, and I'm not too familiar on Deb's /etc directory), try shutting them down. Like I said, for me on RH, it's /etc/rc.d/init.d/, and running "inet restart", "portmapper stop", or whichever service you need to start / stop / restart. Sorry I couldn't be of any more help. Good luck!

[Dave2001]

Unfortunatly they are not in inetd.conf . And i restarted it a couple of times . Portmap is not bothering me so much - finger is ! I dont want it running !
I have portsentry running now - and it takes nearly 100% of my cpu time .... thats not a solution either .

David