Re: No Services....

From: Whoever (nobody@devnull.none)
Date: 10/07/02


From: Whoever <nobody@devnull.none>
Date: Mon, 07 Oct 2002 17:20:48 GMT


Firstly: before you go any further: get all the security updates for your
distro and install them now! Then re-boot (you could just re-start the
services affected by the updates, but since you don't know how to stop the
services, you probably don't know how to restart them).

On Mon, 7 Oct 2002, John wrote:

>
> Also, is it right that if I don't have any services running then nobody
> can connect to my computer, I mean, isn't there anyway round this, is it
> still possible to spawn shells and get in by other means... Surely the vast
> subject of Linux security can't revolve around something as simple as
> this.....

Correct, but you should also firewall the computer with iptables/ipchains
(preferably iptables). Follow a belt and braces approach.

> I've tried shutting down all services, but after running nmap against
> my own box, it seems that there are still some ports open (ports 22 SSH, 25
> SMTP and 6000 ???? can't remember ), are these services supposed to remain
> open and if not how do I shut them down, none of these services are present
> in /etc/inetd.conf so do I shut them down another way...
>

Services are started either by a server process or the inetd "super
server". SSH and SMTP have their own server. Probably sshd and sendmail
respectively.

The command
netstat -avpn
will reveal what processes are listening on what ports.

You have not said what distro you are running so it is not possible to
tell you how to shut down the services.



Relevant Pages

  • Re: NFS vs Samba newbie question
    ... Rather than have this be a Microsoft server, ... >>>The clients will be mostly winxp desktops for now, and may be Linux ... >>>Any insights you folks have would be wonderful. ... > asking themselves...Which Distro? ...
    (comp.protocols.nfs)
  • Re: Time to start Linuxing..some questions?
    ... Last distro I used was Redhat - 6 or 7 I think. ... Server only/command line/Telnet blah blah blah. ... use of VMWARE for some PC windows apps, ... windows'...I'd rather edit config files by hand with vi thank you. ...
    (comp.os.linux.misc)
  • Re: AW: Re: Selecting OS for High-availability/mission-critical web p ortal
    ... satisfied with any distro. ... A critical server won`t have any paket manager at all. ... And other reqs like a statically linked kernel build for your hardware isn`t ... pick a distro with good support. ...
    (Focus-Linux)
  • Re: Time to start Linuxing..some questions?
    ... I used to run many unix systems including Lunix :-), years ago, mainly ... Last distro I used was Redhat - 6 or 7 I think. ... Server only/command line/Telnet blah blah blah. ... terminal (dual floppy) with a webserver and change on one 1.44MB floppy, ...
    (comp.os.linux.misc)
  • Re: Commands updatedb and locate are unrecognized
    ... > server in the first place. ... when it came to selecting the applications. ... But there is an icon on the panel that gives me an xterm whenever ... The only other main distro I know of with "enterprise" in the name is by ...
    (comp.os.linux.misc)