Why is portmap installed by default on a vanilla basic Debian Sarge install? As far as I can see this is mainly used by by NFS and NIS - so if we're not using either of these then why should it be installed. I'm asking mainly because chkrootkit is reporting what seems like a false positive due to an open RPC port - and this seems to be a well known false positive. Kev