LinuxQuestions.org

LinuxQuestions.org (/questions/)
-   Linux - Security (https://www.linuxquestions.org/questions/linux-security-4/)
-   -   Closing port 4000. (https://www.linuxquestions.org/questions/linux-security-4/closing-port-4000-a-371177/)

gbowden 10-09-2005 06:40 AM

Closing port 4000.
 
I did a nmap 127.0.0.1 and recieved the following results:
4000/tcp open remoteanything
How can I close this port.

Krugger 10-09-2005 06:20 PM

do a netstat -ap as root and see what is the program that is using that port. Once you know what program it is, you can kill it and remove it from your init scripts.

sundialsvcs 10-09-2005 08:05 PM

A port is "active" because a daemon (service) application program is running on the system has successfully opened it and is now waiting for packets to arrive. There are, basically, two ways that this can come about...

(1) The service was started during the startup of your computer. Technically, this occurred because /etc/rc.d/rc5.d contains a symbolic-link with a name beginning with the letter "S" ... :rolleyes: ... that points to an entry in /etc/init.d ... :rolleyes: :rolleyes: ... which is a command-file that will start this program.

(2) The service is started by xinetd whenever someone tries to open this port, because there's an entry in /etc/xinet.d which specifies this port. (xinetd listens on a number of ports in case someone requests it, and starts the appropriate program for that port if anyone actually answers).

Armed with this "clear as mud" ... :rolleyes: ... information, you should actually be able to resolve this question. Go to the files in the directories I've mentioned, and "look around." The little-light will come on.

gbowden 10-10-2005 11:04 AM

Yeah thanks. The program running was mldonkey. I thought it would be some kind of file sharing application. Once I removed it everything was fine.
Thanks for your help.


All times are GMT -5. The time now is 02:13 PM.