Disabling Services in Linux?

wardialer · 03-03-2005, 12:14 AM

Well, what do you think from this output what you gave me???? Am I pretty much secure? Its probably not secure...I dont know. But I dont want to mess with the other commands you gave me. Im too scared to screw things up further. But I got some info from the following link incase I change my mind: http://www.cromwell-intl.com/securit...hardening.html

Code:

Proto Recv-Q Send-Q Local Address           Foreign Address         State
tcp        0      0 0.0.0.0:6000            0.0.0.0:*               LISTEN
tcp        0      0 0.0.0.0:631             0.0.0.0:*               LISTEN
tcp        0      0 0.0.0.0:7741            0.0.0.0:*               LISTEN
netstat --udp -ln
Active Internet connections (only servers)
Proto Recv-Q Send-Q Local Address           Foreign Address         State
udp        0      0 127.0.0.1:53            0.0.0.0:*
udp        0      0 0.0.0.0:7741            0.0.0.0:*
udp        0      0 0.0.0.0:68              0.0.0.0:*
udp        0      0 224.0.0.251:5353        0.0.0.0:*
udp        0      0 192.168.1.100:5353      0.0.0.0:*
udp        0      0 127.0.0.1:5353          0.0.0.0:*
udp        0      0 0.0.0.0:631             0.0.0.0:*

win32sux · 03-03-2005, 02:59 AM

Quote:

Originally posted by wardialer
tcp 0 0 0.0.0.0:6000 0.0.0.0:* LISTEN

this is your X server listening on a TCP socket... you can stop X from doing this by using the "-nolisten tcp" option... google about it and you'll find exactly where to add the option on your mandrake system...

Quote:

tcp 0 0 0.0.0.0:631 0.0.0.0:* LISTEN

this is your print server, CUPS... you can disable it if you don't need it...

Quote:

tcp 0 0 0.0.0.0:7741 0.0.0.0:* LISTEN

this is LISA, a network neighborhood type of deal... if you don't need lisa, then disable it...

BTW, your stealth firewall prevents remote access to all of these, so don't lose any sleep over them...

how'd it go with rootkit hunter?? did you try it?? did it find any weirdness on your system??

broch · 03-03-2005, 07:18 AM

follow the suggestion by win32sux also edit cups.conf and set allowed hosts. If this is stand alone workstation, then set cups to listen localhost only.

tsphan · 03-03-2005, 07:36 PM

if you have nmap, try using that to scan for your security holes