I've sometimes found it useful to keep basic services around even though I don't use them most of the time. There have been times when I was happy to have an ftp server sitting, just waiting to be activated. . . =-}

Yeah, but you are a die hard with Linux Moses! j/k

I know what you mean, really. Just the other day I was doing something on one of my boxes, and ssh'd from one to the other. I wanted to shutdown box "A" that runs the apache server normally, but didn't want to go through the process of setting up Apache on Box "B". Luckily, I had never removed apache from box B, and just copied over the httpd.conf and documents in documentRoot and bam! (But I did lose my SSH ability since the port is forwarded to the box I had then shutdown and was ssh-piggybacking from, luckily I took care to make sure everything was working first )Up and running

Good stuff this is....

Looking lost - you might be right!!! It is a good point that i would never have thought of.

I am using red hat 8 server.

Moses - i will look in /etc/rc.d or /etc/init.d and see if i can find any files.

Not sure about chmod. I know i can change permissions but how do i change them back?!!??

thanks everyone, i will let you know how i go

RH8 probably has the startup files in /etc/rc3.d or /etc/rc1.d, but someone more familiar with RH could answer that for certain. . .

Just to add another wee bit - you arent't using a router are you? Just that tftp, RIP and snmp are the sort of services you'd expect to see on it

OH, my goodness, Looking_Lost, you think of everything!!!!

if that is the case then how can i stop it ? Configure the router or are these a necessity????

The red hat 8 server is not directly attached to the router. It is sitting on the local lan.

thanks again

Well when you're scanning you're external IP you'll actually be scanning the router and I'm guessing these particular services don't show up if you scan using the internal LAN IP ?

It's just the way things are with routers if you can turn off the services on the router as you probably don't need RIP (if it's even on) as you are probably just using it as a gateway, other than that take a look at your routers docs and use it's suggestions for security - nice big passwords and all that. It shouldn't be too big a problem though.

ok, i will also check etc/rc3.d (what moses has said) as well as the router. But, i think you have made a good point. Why didn't i think of that!!!???!!!

Anyway, will i be able to edit the etc/rc3.d files directly?

thanks again - like i have said before and will continue to say over and over, I love these groups!!!

I am learning heaps!!

You DON'T want to turn off tftp on your router. It allows you to fix major problems with it (by flashing the EPROM) if you ever completely screw it up. Although. . . Most routers provide a backup ROM which you can flash to the EPROM by hitting the "reset the universe" button, so maybe it doesn't matter that much. . . =-}

moses, you have put a spanner in the works. Now i do not know what to do.

Should i leave the router alone and really secure my red hat 8 server?

thanks

He hasn't really - how do you normally access the settings in the router? Through your browser or how?

looking lost, i normally do it through the browser. Why do you ask?

'Cos if you can turn it off you can turn it on again if you ever need to upgrade the firmware. They are separate entities http and tftp.

Anyway, I guess you should check your router's doc's/settings to see if there is a little tftp dude hiding in there and put him to sleep if he is - if there's not then oh well

if it is not then i am back to square one again

Will let you know later on today - going to visit the router in about 4 hours time

I wouldn't worry about the tftp server running on the router. It should be set to only respond to local net IPs, so no one from the outside can access it unless they've already cracked your system.