RE: Open ports & security

["Brooks R. Robinson" <brooks.robinson@rides.com>]

> Port 111 is the portmap daemon, used by NFS and NIS (anything else?).
> It doesn't look like you're using NFS or NIS (if so you'd have other
> ports open) so you can probably shut it off.  If you do want to keep it
> on, it might be worth it to use something like ipchains or iptables to
> filter access from the internet.  You can also use /etc/hosts.{allow,deny}
> to restrict access to the portmap daemon.
>
> Also, I know of no services that use discard, time, or daytime, so
> there's no reason for them to be on.  Of course, there's no *known*
> reason to turn them off, either, but...

Okay, so I have edited my /etc/inetd.conf file to turn off discard, time,
and daytime.
No Problem.

I am not using NFS or NIS, and I have started to hunt down how/where to turn
off portmap.

Hmmm...

I check out things in /etc/init.d.  Ahh...  mountnfs.sh!

But wait!  I read through the script....  It shouldn't be on!  There's
nothing to turn it on.

my /etc/fstab:

# /etc/fstab: static file system information.
#
# <file system> <mount point>   <type>  <options>
<dump>  <pass>
/dev/hda1       /               ext2    defaults,errors=remount-ro      0
1
/dev/hda3       none            swap    sw                              0
0
proc            /proc           proc    defaults                        0
0
/dev/fd0        /floppy         auto    defaults,user,noauto            0
0
/dev/cdrom      /cdrom          iso9660 defaults,ro,user,noauto         0
0
/dev/hda2       /var            ext2    rw                              0
2
/dev/hda5       /usr            ext2    rw                              0
2
/dev/hda6       /home           ext2    rw                              0
2

	What am I missing?  It's potato with a 2.2.15 kernel.

Thanks,

Brooks