Hi. On Thu, 21 Jul 2016 01:09:36 +0000 (UTC) Thiago Zoroastro <thiago.zoroas...@yahoo.com.br> wrote:
> Hi there, I would like you sorry me if I wrote the English wrong in some > place. > > I realized that my Debian systems are with 445's IP ports opened. How I could > to block permanently this and any other IP port when I wish? > I've blocked with an Iptables command but I would like a way to block > forever. I wish to keep 445 IP port closed since when my Debian system is > started. > > Could I to know what the package that's installed and opening this IP port > opened? "ss -lnp | grep 445" as root should show you whatever process is listening on 445 and whatever protocol is used. Chances are, it's smbd and tcp. "dpkg -S <procname>" should show you what package offending binary belongs to. Chances are, it's samba. To block it (but why would you want to do so? Just remove the offending package) you'll need to: iptables -I INPUT ! -i lo -p tcp --dport 445 -j DROP ip6tables -I INPUT ! -i lo -p tcp --dport 445 -j DROP Reco
