[SOLVED] nmap problem

Nmap scan report for 192.168.1.8 Host is up (0.00042s latency). Not shown: 998 closed ports PORT STATE SERVICE VERSION 80/tcp open http? |_http-methods: No Allow or Public header in OPTIONS response (status code 404) |_http-title: Site doesn't have a title (text/html; charset=UTF-8). 111/tcp open rpcbind (rpcbind V2-4) 2-4 (rpc #100000) | rpcinfo: | program version port/proto service | 100000 2,3,4 111/tcp rpcbind | 100000 2,3,4 111/udp rpcbind | 100024 1 33044/tcp status |_ 100024 1 49463/udp status

Port 111 is open. I searched the internet for it and the results are very vague. What I was able to deduce is that it has something to do with NFS-service (Network File System Services).

I found this thread on what to do with it: http://www.linuxquestions.org/questi...d-smbd-909530/

My question: how was this port opened? By what program? Is it even possible to find out? I would very much like to find out before I start working on it.

Thanks beforehand.

rpcbind is a server. Check to see if the service is enabled to start at boot up. It does not appear that you are running nfs or anything that requires it, so just disable it.

On 192.168.1.8 you can do:

netstat -tpan

... and it will show you exactly which process has opened each port. Usually you can just disable the rpcbind service if you don't want it listening.

I have a Debian system. To stop the service permanently, I just use this code?? (like it is advised here: http://unix.stackexchange.com/questi...-not-using-nfs)

service portmap stop service nfs-kernel-server stop

(I rather ask first, then just type something in).

No, it will just tun it off not disable.

The syntax is:
update-rc.d <daemon> enable|disable

That worked. Thank you Michaelk and btmiller, for your answers.