On Sun, 11 Aug 2002, Rick Moen wrote:
> (2) _How_ did you distribution set it to autostart? You'll have to find
> this for yourself. (Sorry.) For one thing, I don't even know what
> you're running. For another, you need to know how your system works.
Of course. Sorry about that, guess I was getting sleepy. I'm running Red
Hat 6.2 and I found out that I could use ntsysv or tksysv to disable the
services. They create special symbolic links to statrtup scripts for these
services.
> A few words about blocking ports versus disabling services:
>
> What I'm saying is that, if your X11 server is currently configured to
> accept incoming network connections, in your shoes I'd reconfigure it to
> stop doing so, instead of trying to hide the problem using
> port-filtering rulesets. Same thing with your font server.
Gottas studfy TCP/IP, like you recommend. Actually, I'm not sure if my X
and font servers are listening for stuff coming from the outside. I guess
they are since there's a foreign address in the listing below.
Proto Recv-Q Send-Q Local Address Foreign Address State PID/Program name
tcp 0 0 *:6000 *:* LISTEN 779/X
tcp 0 0 *:7102 *:* LISTEN 513/fontfs
For X, I suspect that xhost has something to do with it since it accepts a
port argument. I'm still figuring out how the font server can listen to a
port.
I've turned off practically all the network services now. Even inetd isn't
running. Plus the tcp wrappers are configured to cover those services
too just in case tney are run somehow. I got that from a book and it seems
to be working right.
Thanks again for all the help! I'm getting somewhere. God bless!
-- [Manny Amador] ----------------------------- [[EMAIL PROTECTED]] --
Member: Philippine League for Democratic Telecommunications, Inc.
"Affordable Access for All!"
-- [Distributed Development Network (DDN)] ------- [www.distdev.com] --
_
Philippine Linux Users Group. Web site and archives at http://plug.linux.org.ph
To leave: send "unsubscribe" in the body to [EMAIL PROTECTED]
To subscribe to the Linux Newbies' List: send "subscribe" in the body to
[EMAIL PROTECTED]
