Re: portscan: sunrpc etc...
Just a quick warning -- killall functions quite nicely under linux. But,
don't try it under other versions of unix as superuser, since it often does
kill*all*.
As for the services...
discard throws away everything that hits it -- /dev/null ported to tcp/ip
sockets. :) daytime tells the date and time (Thu Sep 23 12:42:13 1999). Time
I don't know exactly how it works, I get one of the french quotes when I try
to telnet to that port on my machine, and auth is identd -- used sometimes
for irc, printing, email, that sort of stuff, though many people disable it,
and there are many ways under windows to replace it entirely with bogus info
without requiring administrator access -- so most people don't trust it.
(and don't you hate 'inetd' 'init' and 'identd' ??)
And, of course, for sunrpc, I haven't a clue how to remove it, though look
into "portmap" etc.. :)
On Thu, Sep 23, 1999 at 04:35:35AM -0700, Lev Lvovsky wrote:
>
> hello,
>
> upon runnign portscan on my computer from a nonlocal host, I get the
> following:
>
> 9 -> discard
> 13 -> daytime
> 21 -> ftp
> 22 -> ssh
> 23 -> telnet
> 25 -> smtp
> 37 -> time
> 79 -> finger
> 80 -> www
> 110 -> pop-3
> 111 -> sunrpc
> 113 -> auth
>
> as I use pretty much all of the "standard" daemons, I don't know what
> 'discard', 'daytime', 'time', 'sunrpc', and 'auth' are....if anyone can
> suggest ways for turning these off, I'd appreciate it (inetd.conf doesn't
> do have anything that I've not checked as far as I know). I especially
> need help with sunrpc, as it's nowhere to be found in rc*...
>
> also, can somone give me a straight answer on how to restart initd? I've
> heard 'kill -HUP inetd', but it gives me an error of not being able to
> find it...I just kill it by pid, nad restart it manually (type 'inetd').
>
> thanks!!!!
> -lev
>
>
> //sig:
> //Social graces are the packet headers of everyday life
>
>
> --
> Unsubscribe? mail -s unsubscribe debian-user-request@lists.debian.org < /dev/null
--
Seth Arnold | http://www.willamette.edu/~sarnold/
Hate spam? See http://maps.vix.com/rbl/ for help
Hi! I'm a .signature virus! Copy me into
your ~/.signature to help me spread!
Reply to: