>I've just noticed that my debian testing open many ports by default: > >tcp 0 0 *:dict *:* LISTEN >tcp 0 0 *:time *:* LISTEN >tcp 0 0 *:discard *:* LISTEN >tcp 0 0 *:682 *:* LISTEN I'm curious which utility produced that listing; I haven't seen "lsof" produce that - ? > Buy a firewall or set up iptables. You can just load the Firestarter package; it will allow you to block ports (via a generated iptables script).