Re: Limiting attack surface for Debian sshd

[Marc SCHAEFER <schaefer@alphanet.ch>]

Hello,

On Sun, Apr 13, 2025 at 10:59:45AM -0400, Lee wrote:
> I taking a class at the local library; my laptop has avahi and cups
> ports open .. which I'm not thrilled about but I like the zero-conf
> printing ability.

If you
   sudo systemctl disable cups # and maybe others

then, you can do

   sudo systemctl start cups

whenever you require cups (and stop it afterwards).

I rarely print documents nowadays.

You could also install a local firewall, but the goal with CUPS is
presumably to let it talk to other systems.