Re: securing the system, stopping unnecessary services and closing open ports.

I use postpaid mobile broadband and my IP is both the system address and
the gateway. There is no NAT with postpaid service, it's only available
with prepaid in Australia. Not sure why.

Not sure what you mean there.... I suspect you mean only postpaid allow a static IP address (for some accounts). I use both prepaid and postpaids USB UMTS modems with different ISPs - they all use the same, weird, setup where the remote address is "defaulted to" (different dogs, same leg action) - perhaps that's the NAT you're referring to??

ie. Could not determine remote IP address: defaulting to 10.64.64.64[*1]

eg. ppp0 inet address and p-t-p are different, and the ip I use for remote access is different again (the one shown in http://myip.dk)

my system IP for ppp0 is 101.***.***.*** and it's not static.

but from what I can remember all postpaid accounts in Australia have 10.***.***.*** addresses and are behind NAT. The only way I could SSH was by reverse port forwarding. I eventually ended up getting postpaid.
That's how it works in Australia. I believe you are not in Aus.

See this post for more info.
http://forums.whirlpool.net.au/forum-replies.cfm?t=1488078

The only things I need are CUPS and SMTP for Zimbra.

I will disable the rest. I guess I have to use update.rc-d.

you could just remove them
eg:-
# apt-get --purge remove libnfsidmap2 nfs-common samba

if you don't use samba at all (cifs-utils samba samba-common samba-common-bin smbfs) then change "samba" to "samba*"

I'd suggest using -s instead of --purge first - just in case samba was originally pulled in by another package which you want to keep.

Thanks for the info. Will definitely uninstall samba and nfs.

Reply to: