Help getting my ports filtered/closed....

BmxFace · 01-30-2004, 11:26 AM

i have a bunch of ports open making it easy access for someone to get into my system...i need help closeing these...but some of them i still need access for other people...but i dont want them to run free throughout my system either

Code:

PORT     STATE SERVICE
80/tcp   open  http
6000/tcp open  X11
6666/tcp open  irc-serv
6667/tcp open  irc
6668/tcp open  irc

pazvant · 01-30-2004, 05:55 PM

Hi,
If you want to close ports , u can either stop service or apply a basic iptables rule.For stop service u must kill the processid of port number.

like:: netstat -an | grep more
tcp 0 0 0.0.0.0:3306 0.0.0.0:* LISTEN
tcp 0 0 0.0.0.0:110 0.0.0.0:* LISTEN
tcp 0 0 0.0.0.0:80 0.0.0.0:* LISTEN
tcp 0 0 0.0.0.0:6000 0.0.0.0:* LISTEN
tcp 0 0 0.0.0.0:22 0.0.0.0:* LISTEN
tcp 0 0 0.0.0.0:25 0.0.0.0:* LISTEN
...
..

then =>
ps -fe | grep 110
root 711 692 0 Jan30 ? 00:00:00 tcpserver -H -R -v -c100 0 110 q
root 1744 863 0 01:52 pts/1 00:00:00 grep 110

then=>
kill 711.. Is the basic way .

If your service has to be up ypu must apply a firewall rule like:

iptables -A INPUT -i eth0 -p tcp --destination-port 153 -j DROP
iptables -A INPUT -i eth0 -p tcp --destination-port 707 -j DROP
iptables -A OUTPUT -o eth0 -p tcp --destination-port 153 -j DROP
iptables -A OUTPUT -o eth0 -p tcp --destination-port 707 -j DROP

BmxFace · 02-03-2004, 11:15 AM

i dont quite understand this...sorry :\

qwijibow · 02-04-2004, 11:07 AM

read

man iptables

iptables is the linux firewall.