Re: how to close port 113 ident xinetd

[Richard Hector <richard@walnut.gen.nz>]

On Sat, 2008-08-02 at 18:17 -0500, Ron Johnson wrote:
> On 08/02/08 17:43, Ansgar Burchardt wrote:
> > Hi,
> > 
> > "Jimmy Wu" <jimmywu013+debian@gmail.com> writes:
> > 
> >> I tried doing an nmap scan on myself the other day and found that tcp
> >> port 113 was open.  Nmap listed the service as ident.  I am trying to
> >> remove this service since I don't think I need it, but I can't figure
> >> out how.  I removed the package pidentd, after which nmap reported the
> >> port was still open, but changed its service description to "auth?".
> > 
> > Did you restart xinetd after removing pidentd?
> 
> Since the superserver only activates processes on demand, does it 
> really matter that xinetd was not restarted?

That's presumably the reason for the changed description from nmap -
xinetd is still listening on the port, but can't find the program when
it tries to start it.

Removing the package has hopefully removed the relevant line from the
config file (/etc/inetd.conf?), so xinetd won't listen on that port when
it restarts.

Richard