Re: Newbie - wants to close ports

2002-09-30 Thread Zeno Davatz
On 30.9.2002 10:03 Uhr, Christian Schuerer-Waldheim [EMAIL PROTECTED] wrote: Either stop all unused/unwanted services or use a firewall (iptables) to protect your machine. That is exactly what I am trying to do: stop all unwanted services. To me it seems more difficult to to do then so say...

Re: Newbie - wants to close ports

2002-09-30 Thread Zeno Davatz
://www.debian.org/doc/manuals/securing-debian-howto/index.en.html Thanks for the link. Will read this once again. Zeno - Original Message - From: Zeno Davatz [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Monday, September 30, 2002 10:43 AM Subject: Newbie - wants to close ports Hi

Re: Newbie - wants to close ports

2002-09-30 Thread Zeno Davatz
PROTECTED] with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED] -- Mit freundlichen Grüssen / best regards Zeno Davatz Strategie Akquisition +41 1 350 85 86 www.ywesee.com intellectual capital connected www.generika.cc -- To UNSUBSCRIBE, email to [EMAIL PROTECTED

Re: Newbie - wants to close ports

2002-09-30 Thread Zeno Davatz
On 30.9.2002 10:54 Uhr, InfoEmergencias - Luis Gómez [EMAIL PROTECTED] wrote: fingerd is the name of the package :) Thanks for the hint. Tried that also: debian:/etc# apt-get --purge remove fingerd Reading Package Lists... Done Building Dependency Tree... Done Package fingerd is not installed,

Re: Newbie - wants to close ports

2002-09-30 Thread Zeno Davatz
On 30.9.2002 11:19 Uhr, Tobias Overkamp [EMAIL PROTECTED] wrote: what does a netstat -lnp|grep 79 say to you? You should see the process that binds to the port... Thanks - that is a nice command. It give me: debian:/etc/snort# netstat -lnp|grep 79 tcp0 0 0.0.0.0:79

Re: Newbie - wants to close ports

2002-09-30 Thread Zeno Davatz
On 30.9.2002 11:55 Uhr, Michael Renzmann [EMAIL PROTECTED] wrote: In order to get informed in cases when there are (more or less) obvious port scans? :) I admit - I can not really recall. Thanks for your help. Zeno -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of

Open Ports

2002-10-17 Thread Zeno Davatz
Hi I got two open Ports on my Debian-Server and I do not know what they are standing for: Open Port: 56851 Open Port: 57216 Any help or hint is greatly appreciated. Zeno -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]

Re: Open Ports

2002-10-17 Thread Zeno Davatz
On 17.10.2002 10:56 Uhr, Cristi Banciu [EMAIL PROTECTED] wrote: try lsof -i | grep 56851 it could help u see what application is listening on that port Thanks for your help. I get: ywesee@debian:/etc/tinydns/root sudo lsof -i | grep 56851 Password: httpd 2495 root3u IPv4 630910

Re: Open Ports

2002-10-17 Thread Zeno Davatz
On 17.10.2002 11:59 Uhr, Cristi Banciu [EMAIL PROTECTED] wrote: On Thu, 2002-10-17 at 11:53, Zeno Davatz wrote: On 17.10.2002 10:56 Uhr, Cristi Banciu [EMAIL PROTECTED] wrote: try lsof -i | grep 56851 it could help u see what application is listening on that port Thanks for your help. I

Newbie - wants to close ports

2002-09-30 Thread Zeno Davatz
Hi List I am an newbie and done a nmap -v of my local maschine that is supposed to be put into the internet after I managed to close all the necessary ports. Can anyone give me a hint how to go about closing all the following port execpt ssh, http, https? Port State Service 1/tcp

Re: Newbie - wants to close ports

2002-09-30 Thread Zeno Davatz
On 30.9.2002 10:03 Uhr, Christian Schuerer-Waldheim [EMAIL PROTECTED] wrote: Either stop all unused/unwanted services or use a firewall (iptables) to protect your machine. That is exactly what I am trying to do: stop all unwanted services. To me it seems more difficult to to do then so say...

Re: Newbie - wants to close ports

2002-09-30 Thread Zeno Davatz
://www.debian.org/doc/manuals/securing-debian-howto/index.en.html Thanks for the link. Will read this once again. Zeno - Original Message - From: Zeno Davatz [EMAIL PROTECTED] To: debian-security@lists.debian.org Sent: Monday, September 30, 2002 10:43 AM Subject: Newbie - wants to close

Re: Newbie - wants to close ports

2002-09-30 Thread Zeno Davatz
] with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED] -- Mit freundlichen Grüssen / best regards Zeno Davatz Strategie Akquisition +41 1 350 85 86 www.ywesee.com intellectual capital connected www.generika.cc

Re: Newbie - wants to close ports

2002-09-30 Thread Zeno Davatz
On 30.9.2002 10:54 Uhr, InfoEmergencias - Luis Gómez [EMAIL PROTECTED] wrote: fingerd is the name of the package :) Thanks for the hint. Tried that also: debian:/etc# apt-get --purge remove fingerd Reading Package Lists... Done Building Dependency Tree... Done Package fingerd is not installed,

Re: Newbie - wants to close ports

2002-09-30 Thread Zeno Davatz
On 30.9.2002 11:19 Uhr, Tobias Overkamp [EMAIL PROTECTED] wrote: what does a netstat -lnp|grep 79 say to you? You should see the process that binds to the port... Thanks - that is a nice command. It give me: debian:/etc/snort# netstat -lnp|grep 79 tcp0 0 0.0.0.0:79

Re: Newbie - wants to close ports

2002-09-30 Thread Zeno Davatz
On 30.9.2002 11:55 Uhr, Michael Renzmann [EMAIL PROTECTED] wrote: In order to get informed in cases when there are (more or less) obvious port scans? :) I admit - I can not really recall. Thanks for your help. Zeno

Open Ports

2002-10-17 Thread Zeno Davatz
Hi I got two open Ports on my Debian-Server and I do not know what they are standing for: Open Port: 56851 Open Port: 57216 Any help or hint is greatly appreciated. Zeno

Re: Open Ports

2002-10-17 Thread Zeno Davatz
On 17.10.2002 10:56 Uhr, Cristi Banciu [EMAIL PROTECTED] wrote: try lsof -i | grep 56851 it could help u see what application is listening on that port Thanks for your help. I get: [EMAIL PROTECTED]:/etc/tinydns/root sudo lsof -i | grep 56851 Password: httpd 2495 root3u IPv4

Re: Open Ports

2002-10-17 Thread Zeno Davatz
On 17.10.2002 11:59 Uhr, Cristi Banciu [EMAIL PROTECTED] wrote: On Thu, 2002-10-17 at 11:53, Zeno Davatz wrote: On 17.10.2002 10:56 Uhr, Cristi Banciu [EMAIL PROTECTED] wrote: try lsof -i | grep 56851 it could help u see what application is listening on that port Thanks for your help. I