Re: Newbie - wants to close ports

[Zeno Davatz <zdavatz@ywesee.com>]

On 30.9.2002 11:19 Uhr, "Tobias Overkamp" <tov-debian-security@nrw.net>
wrote:

> what does a 
> netstat -lnp|grep 79
> say to you?
> You should see the process that binds to the port...
Thanks - that is a nice command.

It give me:
debian:/etc/snort# netstat -lnp|grep 79
tcp        0      0 0.0.0.0:79              0.0.0.0:*               LISTEN
303/portsentry   

And I also found follwoing article witch I think is very interesting:

http://lists.debian.org/debian-security/2002/debian-security-200207/msg00324
.html

Obviously portsentry opens a lot of ports just to listen on them and is the
only daemon behind - that results in huge logfiles etc.

I am just gonna deinstall portsentry - why did I install it in the first
place???

Thanks 
Zeno