Hi.
On Thu, 21 Jul 2016 01:09:36 +0000 (UTC)
Thiago Zoroastro <
thiago.zoroastro@yahoo.com.br> wrote:
> Hi there, I would like you sorry me if I wrote the English wrong in some place.
>
> I realized that my Debian systems are with 445's IP ports opened. How I could to block permanently this and any other IP port when I wish?
> I've blocked with an Iptables command but I would like a way to block forever. I wish to keep 445 IP port closed since when my Debian system is started.
>
> Could I to know what the package that's installed and opening this IP port opened?
"ss -lnp | grep 445" as root should show you whatever process is
listening on 445 and whatever protocol is used. Chances are, it's smbd
and tcp.
"dpkg -S <procname>" should show you what package offending binary
belongs to. Chances are, it's samba.
To block it (but why would you want to do so? Just remove the offending
package) you'll need to:
iptables -I INPUT ! -i lo -p tcp --dport 445 -j DROP
ip6tables -I INPUT ! -i lo -p tcp --dport 445 -j DROP
Reco