Click to See Complete Forum and Search --> : securing slackware 7.1


NEcron
12-24-2000, 09:08 AM
hey everyone
i jst installed slackware 7.1 (used to be debian 2.2)
on a p 266
32 meg sd
2gig linux
64meg swap
(jst a bit of info)
kernel 2.2.17 (custom i need sound)
and im a bit of a security nut and ive noticed even after commeting out all of the entries in /etc/inetd theres alot of services runnig like httpd (figured out how to shut off)
25/tcp open smtp
111/tcp open sunrpc
587/tcp open submission
1030/tcp open iad1
1031/tcp open iad2
6000/tcp open X11
im asumning they are run throught the init scripts i know X wont be shut down it should but wont
is there a way to stop these from running with out stopping my system from being able to speck to the rest of the world and if poseable cleanly.
i edited some of my scripts manly inet2 by hand and my startup looks kinda messy ??
oh by the way im running a dialin ppp connecting if it matters

Taylor
12-24-2000, 01:28 PM
Well for X unless you want to connect to it from another computer I would write an ipchains rule or iptables rule and filter that out.

As for the rest...

25 and 587 are used by sendmail found in /etc/rc.d/rc.M

111 can be turned off by commenting out rpc services in /etc/rc.d/rc.inet2

1030 & 1031 I am not sure what those are. If you can not find where they are I would write a ipchains rule to deny them.

Oh also for you can add this line to your /usr/X11R6/bin/startx file.
serverargs="-nolisten tcp"

Hope this helps.


------------------
-Taylor

[This message has been edited by Taylor (edited 24 December 2000).]