Title: RE: [plug] portscan

Then ipchains come into play... :-)

> -----Original Message-----
> From: Joel Eusebio [mailto:[EMAIL PROTECTED]]
> Sent: Monday, 4 December 2000 14:23
> To: [EMAIL PROTECTED]
> Subject: Re: [plug] portscan
>
>
> The only thing without a # sign in my inetd.conf is telnet. I
> even renamed
> my rexecd and rexec hoping that it would disable that port 510. :)
> On Mon, 4 Dec 2000, Mark Anthony J. Mercado wrote:
>
> > > "Joel N. Eusebio" wrote:
> > >
> >
> > <snip>
> >
> > > I did a portscan on one of my servers using nmap. I found
> out that I
> > > have a port open at 510. I've checked what process it is
> running on
> > > but I can't seem to find it. When I tried to connect to it's port
> > > using telnet.... it says:
> > >
> > > BSD rexecd version 2.8
> > > Password?
> > >
> > > From the man pages I found out that rexecd is a "remote execution
> > > server"  . Any ideas on this one??? Thanks a lot.
> > >
> > > ---------------->jOEl
> >
> > you sure it's not port 512 ? anyway, might as well turn off
> remote exec.
> > On most cases it's not needed and poses as a security risk.
> If you're
> > using inetd, edit /etc/inetd.conf and comment the line
> regarding exec ,
> > or lines with in.rexecd or rexecd ...  then do not forget to restart
> > inetd
> >
> > HTH,
> >
> > -Mark
> >
> >
>
> --
>  _ _ _ _____________________
> |_|_|_|
> |_|    Joel N. Eusebio
> |_| Systems Administrator
>     Cyberspace Inc. Manila
>        [EMAIL PROTECTED]      _
>         +63 6372775    _ _|_|
>  _____________________|_|_|_|
>      
>
>
>
> _
> Philippine Linux Users Group. Web site and archives at
http://plug.linux.org.ph
To leave: send "unsubscribe" in the body to [EMAIL PROTECTED]

Reply via email to