these are the services that i am seeing in my /etc/rc.d/rc3.d/  directory
which will be started.

arvind

lrwxrwxrwx    1 root     root           15 Jul  9  2001 S05kudzu ->
../init.d/kudzu
lrwxrwxrwx    1 root     root           18 Jul  9  2001 S06reconfig ->
../init.d/reconfig
lrwxrwxrwx    1 root     root           18 Jul  9  2001 S08ipchains ->
../init.d/ipchains
lrwxrwxrwx    1 root     root           17 Jul  9  2001 S10network ->
../init.d/network
lrwxrwxrwx    1 root     root           16 Jul  9  2001 S12syslog ->
../init.d/syslog
lrwxrwxrwx    1 root     root           17 Jul  9  2001 S13portmap ->
../init.d/portmap
lrwxrwxrwx    1 root     root           17 Jul  9  2001 S14nfslock ->
../init.d/nfslock
lrwxrwxrwx    1 root     root           14 Jul  9  2001 S16apmd ->
../init.d/apmd
lrwxrwxrwx    1 root     root           16 Jul  9  2001 S20random ->
../init.d/random
lrwxrwxrwx    1 root     root           15 Jul  9  2001 S25netfs ->
../init.d/netfs
lrwxrwxrwx    1 root     root           16 Jul  9  2001 S35identd ->
../init.d/identd
lrwxrwxrwx    1 root     root           13 Jul  9  2001 S40atd ->
../init.d/atd
lrwxrwxrwx    1 root     root           16 Jul  9  2001 S45pcmcia ->
../init.d/pcmcia
lrwxrwxrwx    1 root     root           16 Jul  9  2001 S50xinetd ->
../init.d/xinetd
lrwxrwxrwx    1 root     root           14 Jul  9  2001 S55sshd ->
../init.d/sshd
lrwxrwxrwx    1 root     root           20 Jul  9  2001 S56rawdevices ->
../init.d/rawdevices
lrwxrwxrwx    1 root     root           13 Jul  9  2001 S60lpd ->
../init.d/lpd
lrwxrwxrwx    1 root     root           18 Jul  9  2001 S75keytable ->
../init.d/keytable
lrwxrwxrwx    1 root     root           18 Jul  9  2001 S80sendmail ->
../init.d/sendmail
lrwxrwxrwx    1 root     root           13 Jul  9  2001 S85gpm ->
../init.d/gpm
lrwxrwxrwx    1 root     root           15 Jan  7 22:25 S85httpd ->
../init.d/httpd
lrwxrwxrwx    1 root     root           15 Jul  9  2001 S90crond ->
../init.d/crond
lrwxrwxrwx    1 root     root           13 Jul  9  2001 S90xfs ->
../init.d/xfs
lrwxrwxrwx    1 root     root           17 Jul  9  2001 S95anacron ->
../init.d/anacron
lrwxrwxrwx    1 root     root           15 Jul  9  2001 S97rhnsd ->
../init.d/rhnsd
lrwxrwxrwx    1 root     root           19 Jul  9  2001 S99linuxconf ->
../init.d/linuxconf
lrwxrwxrwx    1 root     root           11 Jul  9  2001 S99local ->
../rc.local

----- Original Message -----
From: "Suresh Ramasubramanian" <[EMAIL PROTECTED]>
To: "Linux India" <[EMAIL PROTECTED]>
Sent: Friday, May 03, 2002 2:08 PM
Subject: [LIH] Re: could i have been hacked?


> +++ Arvind [linux-india] <03/05/02 14:04 +0530>:
> > i never opened all these services......... but i see them all with an
nmap
> > what do i do?
>
> shut them the hell down, what else?
>
> > Port       State       Service
> > 21/tcp     open        ftp
>
> vi /etc/inetd.conf ... comment out the ftp line.
>
> > 22/tcp     open        ssh
>
> let it be. you will need it - and upgrade to the latest ssh
>
> > 23/tcp     open        telnet
>
> comment out from inetd
>
> > 25/tcp     open        smtp
>
> you need it i guess? this is your postfix here
>
> > 70/tcp     open        gopher
>
> get rid of it.
>
> > 80/tcp     open        http
>
> web
>
> > 110/tcp    open        pop-3
>
> need it i guess
>
> > 111/tcp    open        sunrpc
>
> shut it off ... the services beginning with r in ntsysv.  get rid of them
>
> > 113/tcp    open        auth
>
> this is identd
>
> > 119/tcp    open        nntp
>
> you running a news server? if not uninstall innd or whatever you have
>
> > 139/tcp    open        netbios-ssn
>
> samba.  use ipchains to firewall it from the net
>
> > 515/tcp    open        printer
>
> cups or lpd i suppose
>
> > 587/tcp    open        submission
>
> sendmail
>
> > 1024/tcp   open        kdm
>
> why the hell do you want to run X on a production server?  shut down X ..
>
> > 1521/tcp   open        ncube-lm
>
> wtf is this, beats me...
>
>
> --
> Suresh Ramasubramanian  <---->  mallet <at> efn dot org
> EMail Sturmbannfuhrer, Lower Middle Class Unix Sysadmin
> [Linux One Stanza Tip] From : <[EMAIL PROTECTED]>
> LOST #092 -**< Sub : System Backup FAQ >**-
> For a short FAQ on GNU/Linux system backup visit :-
> http://kmself.home.netcom.com/Linux/FAQs/backups.html
>
> _______________________________________________________________
>
> Have big pipes? SourceForge.net is looking for download mirrors. We supply
> the hardware. You get the recognition. Email Us: [EMAIL PROTECTED]
> _______________________________________________
> linux-india-help mailing list
> [EMAIL PROTECTED]
> https://lists.sourceforge.net/lists/listinfo/linux-india-help


_______________________________________________________________

Have big pipes? SourceForge.net is looking for download mirrors. We supply
the hardware. You get the recognition. Email Us: [EMAIL PROTECTED]
_______________________________________________
linux-india-help mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/linux-india-help

Reply via email to