Re: Port 113 security

From: Seth Arnold (sarnold@wirex.com)
Date: 03/06/03

  • Next message: Ruben Bybee: "No Sendmail pro upgrade on older Linux (pre v6.1)" 
    Date: Thu, 6 Mar 2003 13:58:57 -0800
From: Seth Arnold <sarnold@wirex.com>
To: focus-linux@securityfocus.com

    On Thu, Mar 06, 2003 at 10:07:06AM -0500, Chris Santerre wrote:
    > So does evryone generally let these thru? Any exploits? is there a way to
    > get rid of those in.identd processes if I leave it blocked?

    I generally don't let identd through on my own setups, primarily because
    none of the IRC daemons I connect to require identd. Also, there are
    perhaps a dozen "secure identd daemons", but I doubt any of them are.

    You can disable the in.identd processes by commenting out those lines in
    /etc/inetd.conf or /etc/xinitd.d/*ident*

    Cheers 

    -- 
"It's just PR.  They repeat "small government" enough, and people start
to look past the facts." -- Matt B

  • Next message: Ruben Bybee: "No Sendmail pro upgrade on older Linux (pre v6.1)"