LinuxQuestions.org
Welcome to the most active Linux Forum on the web.
Home Forums Tutorials Articles Register
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Networking
User Name
Password
Linux - Networking This forum is for any issue related to networks or networking.
Routing, network cards, OSI, etc. Anything is fair game.

Notices


Reply
  Search this Thread
Old 12-21-2013, 06:22 AM   #1
validator456
Member
 
Registered: Apr 2013
Location: Rotterdam, The Netherlands
Distribution: Crunchbang Linux
Posts: 234

Rep: Reputation: Disabled
nmap -sS -O 127.0.0.1


Gave this command in the terminal to check what ports were open:
This is the result:
Quote:
111/tcp open rpcbind
631/tcp open ipp
ipp has to do with printing but I don't understand why this port is open because I am not printing.
I don't understand why rpcbind is open and what it precisely stands for.
 
Old 12-21-2013, 08:32 AM   #2
berndbausch
LQ Addict
 
Registered: Nov 2013
Location: Tokyo
Distribution: Mostly Ubuntu and Centos
Posts: 6,316

Rep: Reputation: 2002Reputation: 2002Reputation: 2002Reputation: 2002Reputation: 2002Reputation: 2002Reputation: 2002Reputation: 2002Reputation: 2002Reputation: 2002Reputation: 2002
Quote:
Originally Posted by validator456 View Post
Gave this command in the terminal to check what ports were open:
This is the result:


ipp has to do with printing but I don't understand why this port is open because I am not printing.
I don't understand why rpcbind is open and what it precisely stands for.
Try netstat -lpn to see which processes are listening on those ports.
rpcbind belongs to NFS.
 
Old 12-21-2013, 08:59 AM   #3
validator456
Member
 
Registered: Apr 2013
Location: Rotterdam, The Netherlands
Distribution: Crunchbang Linux
Posts: 234

Original Poster
Rep: Reputation: Disabled
nmap -sS -O 127.0.0.1

Netstat -lpn doesn't return anything valuable:
I tried to remove rpcbind though:
Quote:
sudo apt-get remove portmap
Reading package lists... Done
Building dependency tree
Reading state information... Done
Note, selecting 'rpcbind' instead of 'portmap'
The following packages were automatically installed and are no longer required:
nfs-kernel-server samba-doc smartmontools
Use 'apt-get autoremove' to remove them.
0 upgraded, 0 newly installed, 0 to remove and 1 not upgraded.
ecmporter@probe:~$ sudo apt-get autoremove
Reading package lists... Done
Building dependency tree
Reading state information... Done
The following packages will be REMOVED:
nfs-kernel-server samba-doc smartmontools
0 upgraded, 0 newly installed, 3 to remove and 1 not upgraded.
After this operation, 15.6 MB disk space will be freed.
Do you want to continue [Y/n]? Y
(Reading database ... 174169 files and directories currently installed.)
Removing nfs-kernel-server ...
Stopping NFS kernel daemon: mountd nfsd.
Unexporting directories for NFS kernel daemon....
Removing samba-doc ...
Removing smartmontools ...
Stopping S.M.A.R.T. daemon: smartd.
Processing triggers for man-db ...
but after rebooting it is back.
Is this a security issue?
 
Old 12-21-2013, 10:32 PM   #4
allend
LQ 5k Club
 
Registered: Oct 2003
Location: Melbourne
Distribution: Slackware64-15.0
Posts: 6,371

Rep: Reputation: 2749Reputation: 2749Reputation: 2749Reputation: 2749Reputation: 2749Reputation: 2749Reputation: 2749Reputation: 2749Reputation: 2749Reputation: 2749Reputation: 2749
Port 631 is open for the CUPS daemon. It is used to administer CUPS via the browser interface by entering http://localhost:631 in the address bar.

As has already been stated, rpcbind is part of NFS.

These ports are legitimately open in your system.

For security assessment, you need to scan from another host to find what ports are available externally. Using the Gibson Research ShieldsUP! web page is one way of doing this.
 
Old 12-24-2013, 10:16 AM   #5
validator456
Member
 
Registered: Apr 2013
Location: Rotterdam, The Netherlands
Distribution: Crunchbang Linux
Posts: 234

Original Poster
Rep: Reputation: Disabled
Thank you for answering. I will try it.
 
  


Reply



Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
connect to 127.0.0.1[127.0.0.1]: Connection refused (port 10024) adamos22 Linux - Newbie 2 07-31-2013 12:40 PM
psad: scan detected: 127.0.0.1 -> 127.0.0.1 tcp macaal Linux - Security 4 06-17-2011 01:56 PM
LXer: Learn how to use nmap, and nmap GUI, a great port scan tool LXer Syndicated Linux News 0 01-03-2008 09:10 AM
Sendmail : relay=[127.0.0.1] [127.0.0.1], dsn=4.0.0, stat=Deferred: Connection refuse macadam Linux - Software 0 09-23-2007 02:44 PM
DSN: Data format error & relay=[127.0.0.1] [127.0.0.1] calmbomb Linux - Software 0 11-07-2004 03:24 PM

LinuxQuestions.org > Forums > Linux Forums > Linux - Networking

All times are GMT -5. The time now is 01:39 AM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Open Source Consulting | Domain Registration