I have done a clean install with Mandrake 9.1 ...so far so good!
The more I use it the more Im anti-MS ,

Here is my question....
I have configured the firewall that came with Mandrake, after doing some limited port scans on my system I have found out that certain ports remain 'Closed' .... here is a list of ports found.
80 , 113, 135, 443 (via Gibson Research)
Now I understand that im not as much as risk like a ms-based os.I am using a motorola surfboard cable modem via ethernet

How can I close these ports without disabling any of my network connectivity?

Can these ports remain hidden from port scans?

I dont want to be a sitting duck on the network with ports drawing attention to the advanced eye.

Thank you to all who read this and have any informative information.

Viva La Linux!!

You can block them using:
iptables -A INPUT -p tcp --dport PORT -j REJECT

You could also set the default input policy to drop packets:
iptables -P INPUT DROP

It may be worth looking into what services use those ports and disable them. For instance port 80 is used by web servers. if you don;t host a site on your machine you could disable it.

david,
would you have a link to a good iptalbes how-to/site/information?

thanks

Try:
http://www.netfilter.org/

Thank you very much for the reply.

I have also found this links to iptables and packet filtering
http://www.ecst.csuchico.edu/~dranch...2.4.X-STRONGER
http://www.netfilter.org/documentati...ring-HOWTO.txt

thanks

Upon entering those commands i get the error iptables and/or my kernel need to be updated.

How can I tell what version kernel I have?
I have iptable 1.2.7a
I see netfilter.org has a newer version, do i need the tar.gz and the key file??

So much information,
So little brain space.

it hurts sometimes doesnt' it.

kernel version is less /proc/version
i wouldnt' think that you would need the newest version, though it doesn't hurt to have it. with newer versions bugs have been removed from the earlier versions, and upgrades to the packages have been made.

cheers.