Re: Closing ports...

[Indra Kusuma <indra@kusuma.or.id>]

On Sun, 15 Sep 2002, Markus Grunwald wrote:

# I wanted to close unnecessary ports. I noticed one thing: With netstat,
# _all_ ports were open to the whole world:
#
# Proto Recv-Q Send-Q Local Address           Foreign Address
# State tcp 0 0 *:6565 *:* LISTEN 8078/junkbuster
#
# But I have configured junkbuster to listen only to my network:
# deny 0.0.0.0/0
# permit 192.168.42.0/24

nothing wrong, its completely different aspect, "*" on the netstat output mean
the daemon _listen_ on every network interface, and doesnt mean that the daemon
can be connected from anywhere.

Cheers

Indra Kusuma
--
 ,''`. Indra{@,.}Kusuma.OR.ID -> [Security - Debian/GNU Linux - IPv6]
: :' : 0x4D829E49 - 187D 8C98 FB76 E1A8 5558 853A 4795 4FC1 4D82 9E49
`. `'
  `-