LinuxQuestions.org
Share your knowledge at the LQ Wiki.
Home Forums Tutorials Articles Register
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Networking
User Name
Password
Linux - Networking This forum is for any issue related to networks or networking.
Routing, network cards, OSI, etc. Anything is fair game.

Notices


Reply
  Search this Thread
Old 05-02-2006, 02:31 PM   #1
tuxangler
Member
 
Registered: Mar 2006
Location: Germany
Distribution: OpenSuSE 10.3 x86-64 SMP - Kernel 2.6.23.14
Posts: 42

Rep: Reputation: 15
Howto deactivate unneeded Services in SuSE 10


netstat -a is telling me many unneeded Services.
How to deactivate the things like bootpc and sunrpc?
Kernel is Home-Brew 2.6.16.12 with deactivated unused things.

Quote:
Active Internet connections (servers and established)
Proto Recv-Q Send-Q Local Address Foreign Address State
tcp 0 0 localhost:783 *:* LISTEN
tcp 0 0 *:sunrpc *:* LISTEN
tcp 0 0 *:ndmp *:* LISTEN
tcp 0 0 *:http-alt *:* LISTEN
tcp 0 0 localhost:novell-zen *:* LISTEN
tcp 0 0 *:sunproxyadmin *:* LISTEN
tcp 0 0 *:7634 *:* LISTEN
tcp 0 0 *:ipp *:* LISTEN
tcp 0 0 localhost:remoteware-cl *:* LISTEN
tcp 0 0 localhost:smtp *:* LISTEN
udp 0 0 *:ndmp *:*
udp 0 0 *:bootpc *:*
udp 0 0 *:sunrpc *:*
udp 0 0 *:ipp *:*
udp 0 0 192.168.123.57:ntp *:*
udp 0 0 localhost:ntp *:*
udp 0 0 *:ntp *:*
raw 0 0 *:icmp *:* 7
 
Old 05-02-2006, 03:12 PM   #2
avatarfx
Member
 
Registered: May 2004
Posts: 34

Rep: Reputation: 16
Hello tuxangler.

Well, seems that you have a seroius security problem if you have so many services open without a firewall. As far as I perceive there are certain services you need to deactivate right away. Most of the services can be controlled from YAST, there is a Services Configuration section that you should visit and deactivate all of the services you don't need. This is the recommended step because doesn't take too long and doesn't requires so much Linux knowledge (is complicated to screw it up). Just keep a track of the services you shutted down in case that you need to recover them.

Now, regarding to sunrpc and bootpc, there are some prior considerations. sunrpc is intended to provide an access tohrough the portmapper to other services so deactivating sunrpc can cause problem on any of the following services: rpcbind, nfs, mountd, nfs_acl, status, llockmgr, nlockmgr, walld, rstatd, rusersd, rquotad, bootparam, ypbind, ypserv, tooltalk, cmsd and maybe others that I can't recall righ now.

To deactivate sunrpc, you need to deactivate the "portmap" daemon (or the "portmap" service from the YASE Services Manager) and kill all of the processes related to inetd, here is a sample:

root@linux#kill `pgrep rpc` `pgrep inetd` `pgrep portmap`

On the other hand, bootpc retreives a network address from a server (an older alternative to DHCP) and you should deactivate it only if you're not getting an address with a bootp server (most likely) or if you're not hosting a bootp daemon. To deactivate it you can also use YAST or manually remove the files from the /etc/rc#.d folders.

For more info, please write back ;D
 
Old 05-02-2006, 03:37 PM   #3
tuxangler
Member
 
Registered: Mar 2006
Location: Germany
Distribution: OpenSuSE 10.3 x86-64 SMP - Kernel 2.6.23.14
Posts: 42

Original Poster
Rep: Reputation: 15
Thank you for your help.
I have deactivated all the unneeded things with the Runlevel-Editor before except portmapper.
YaST says "portmapper not running" but here is the result if i turn it off anyway:
Quote:
Active Internet connections (servers and established)
Proto Recv-Q Send-Q Local Address Foreign Address State
tcp 0 0 localhost:783 *:* LISTEN
tcp 0 0 *:ndmp *:* LISTEN
tcp 0 0 *:http-alt *:* LISTEN
tcp 0 0 localhost:novell-zen *:* LISTEN
tcp 0 0 *:sunproxyadmin *:* LISTEN
tcp 0 0 *:7634 *:* LISTEN
tcp 0 0 *:ipp *:* LISTEN
tcp 0 0 localhost:remoteware-cl *:* LISTEN
tcp 0 0 localhost:smtp *:* LISTEN
udp 0 0 *:ndmp *:*
udp 0 0 *:bootpc *:*
udp 0 0 *:ipp *:*
udp 0 0 192.168.123.57:ntp *:*
udp 0 0 localhost:ntp *:*
udp 0 0 *:ntp *:*
raw 0 0 *:icmp *:* 7
YaST is a silly thing, the information seems to be not very serious.
The only port i have opened to the external interface with my firewall is 123 for the ntp-client that i use.
So, now that sunrpc is gone, what to do with these bootpc that i dont need?
bootpc isnt compiled into kernel. The Point "Advanced Router" is set to off.
Also it seems to have new services with the SuSE 10.1.
I have never seen *:sunproxyadmin before.
And i dont know where to find ndmp.
Which service could be used by Port 7634?
 
Old 05-02-2006, 04:05 PM   #4
avatarfx
Member
 
Registered: May 2004
Posts: 34

Rep: Reputation: 16
Well, the only service that seems to need the port 7634 is the hddtemp daemon which is supposed to seize the HDD temperature (don't askme why is it a network service on TCP and I hope that the developer have a good reason for that). Make sure that is disabled as well.

You can also make sure that portmapper is not running by:

Quote:
root@linux#ps -ef | grep portmap
In case is running, just kill it:

Quote:
root@linux#kill `pgrep portmap`
So far, this is how can I help you cause I'm running on Fedora Core 5 and I don't know by memory all of the SUSE file locations, but make sure to check the folllowing dirs:

/etc/rc1.d
/etc/rc2.d
/etc/rc3.d
/etc/rc4.d
/etc/rc5.d
/etc/rc6.d
/etc/init.d

If an unwanted service keeps running, just kill it!

Cheers
 
Old 05-03-2006, 04:05 AM   #5
tuxangler
Member
 
Registered: Mar 2006
Location: Germany
Distribution: OpenSuSE 10.3 x86-64 SMP - Kernel 2.6.23.14
Posts: 42

Original Poster
Rep: Reputation: 15
Ok, all unwanted services are killed and deleted.
ipp is my CUPS-Server. sunproxyadmin comes form wwwoffle, thats all right.
7634 is hddtemp thats ok.
But there is still bootpc alive. ndmp is NAS, but where to find and disable this?
I dont need this remote-backup protocol.
 
Old 05-04-2006, 03:30 PM   #6
tuxangler
Member
 
Registered: Mar 2006
Location: Germany
Distribution: OpenSuSE 10.3 x86-64 SMP - Kernel 2.6.23.14
Posts: 42

Original Poster
Rep: Reputation: 15
Now i have found the Problem.
ndmp comes form webmin and was deactivated immediately.
The services running yet should be alright.
Thank you for your help.
 
Old 05-16-2006, 01:08 AM   #7
tuxangler
Member
 
Registered: Mar 2006
Location: Germany
Distribution: OpenSuSE 10.3 x86-64 SMP - Kernel 2.6.23.14
Posts: 42

Original Poster
Rep: Reputation: 15
problem solved

Last edited by tuxangler; 05-16-2006 at 06:38 AM.
 
  


Reply



Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
HOWTO Check, Start and Stop Services GNewbie MEPIS 9 08-22-2012 10:09 PM
Unneeded Services robpom Linux - Security 4 03-29-2005 08:28 AM
Closing Unneeded Services AvatarofVirgo Linux - Security 2 01-20-2005 05:16 PM
howto identify what services are running via CLI? Lleb_KCir Linux - General 3 09-21-2004 11:44 PM
ps -A unneeded apps watashiwaotaku7 Linux - Software 4 11-09-2002 08:58 PM

LinuxQuestions.org > Forums > Linux Forums > Linux - Networking

All times are GMT -5. The time now is 09:25 PM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Open Source Consulting | Domain Registration