LinuxQuestions.org
Latest LQ Deal: Complete CCNA, CCNP & Red Hat Certification Training Bundle
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Security
User Name
Password
Linux - Security This forum is for all security related questions.
Questions, tips, system compromises, firewalls, etc. are all included here.

Notices


Reply
  Search this Thread
Old 10-09-2005, 07:40 AM   #1
gbowden
Member
 
Registered: Dec 2003
Location: Spain
Distribution: Slackware 14.1 64bit - multilib
Posts: 147

Rep: Reputation: 27
Closing port 4000.


I did a nmap 127.0.0.1 and recieved the following results:
4000/tcp open remoteanything
How can I close this port.
 
Old 10-09-2005, 07:20 PM   #2
Krugger
Member
 
Registered: Oct 2004
Posts: 229

Rep: Reputation: 30
do a netstat -ap as root and see what is the program that is using that port. Once you know what program it is, you can kill it and remove it from your init scripts.
 
Old 10-09-2005, 09:05 PM   #3
sundialsvcs
LQ Guru
 
Registered: Feb 2004
Location: SE Tennessee, USA
Distribution: Gentoo, LFS
Posts: 8,606
Blog Entries: 4

Rep: Reputation: 2997Reputation: 2997Reputation: 2997Reputation: 2997Reputation: 2997Reputation: 2997Reputation: 2997Reputation: 2997Reputation: 2997Reputation: 2997Reputation: 2997
A port is "active" because a daemon (service) application program is running on the system has successfully opened it and is now waiting for packets to arrive. There are, basically, two ways that this can come about...

(1) The service was started during the startup of your computer. Technically, this occurred because /etc/rc.d/rc5.d contains a symbolic-link with a name beginning with the letter "S" ... ... that points to an entry in /etc/init.d ... ... which is a command-file that will start this program.

(2) The service is started by xinetd whenever someone tries to open this port, because there's an entry in /etc/xinet.d which specifies this port. (xinetd listens on a number of ports in case someone requests it, and starts the appropriate program for that port if anyone actually answers).

Armed with this "clear as mud" ... ... information, you should actually be able to resolve this question. Go to the files in the directories I've mentioned, and "look around." The little-light will come on.
 
Old 10-10-2005, 12:04 PM   #4
gbowden
Member
 
Registered: Dec 2003
Location: Spain
Distribution: Slackware 14.1 64bit - multilib
Posts: 147

Original Poster
Rep: Reputation: 27
Yeah thanks. The program running was mldonkey. I thought it would be some kind of file sharing application. Once I removed it everything was fine.
Thanks for your help.
 
  


Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
closing ssh port einstien Linux - Security 32 06-29-2005 10:57 PM
Dell Insprion 4000 with Port Replicator - how to FN-F8 with external keyboard? oddiofile Linux - Hardware 0 09-03-2004 12:30 PM
closing rpc3 port flubber Slackware 1 05-10-2004 02:55 PM
closing port 25 using sendmail sidkdbl07 Linux - Software 5 08-02-2003 05:46 AM
Closing port 111 psyklops Linux - General 3 05-01-2002 01:53 AM

LinuxQuestions.org > Forums > Linux Forums > Linux - Security

All times are GMT -5. The time now is 05:37 PM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Facebook: linuxquestions Google+: linuxquestions
Open Source Consulting | Domain Registration