Linux - Security This forum is for all security related questions.
Questions, tips, system compromises, firewalls, etc. are all included here. |
Notices |
Welcome to LinuxQuestions.org, a friendly and active Linux Community.
You are currently viewing LQ as a guest. By joining our community you will have the ability to post topics, receive our newsletter, use the advanced search, subscribe to threads and access many other special features. Registration is quick, simple and absolutely free. Join our community today!
Note that registered members see fewer ads, and ContentLink is completely disabled once you log in.
Are you new to LinuxQuestions.org? Visit the following links:
Site Howto |
Site FAQ |
Sitemap |
Register Now
If you have any problems with the registration process or your account login, please contact us. If you need to reset your password, click here.
Having a problem logging in? Please visit this page to clear all LQ-related cookies.
Get a virtual cloud desktop with the Linux distro that you want in less than five minutes with Shells! With over 10 pre-installed distros to choose from, the worry-free installation life is here! Whether you are a digital nomad or just looking for flexibility, Shells can put your Linux machine on the device that you want to use.
Exclusive for LQ members, get up to 45% off per month. Click here for more info.
|
 |
04-10-2006, 02:37 AM
|
#1
|
LQ Newbie
Registered: Apr 2005
Posts: 4
Rep:
|
Open Ports In Linux
Hi everybody,
I just made a test in a linux server and figured out
that some udp ports are open and i would like to find
how can i close them
UDP ports (14)
88 kerberos => Kerberos
123 NTP => Network Time Protocol
137 netbios-ns => NetBios Name Service
138 netbios-dgm => NetBios Datagram Service
162 snmptrap => SNMP Trap
445 microsoft-ds => Microsoft-DS
500 isakmp => Isakmp
1433 ms-sql-s => Microsoft-SQL-Server
1434 ms-sql-s => Microsoft-SQL-Server
1900 ssdp => Simple Service Discovery Protocol
3003 cgms => CGMS
3127 trojan => W32.Mydoom
4672 eD2Kt => eD2K P-2-P Transport
27015 hle => Half-Life Engine
It says that 3127 is a port for trojan W32.Mydoom
Can it be closed?
The test was made from a windows XP based PC.
Pls anyone ,help
|
|
|
04-10-2006, 02:52 AM
|
#2
|
Moderator
Registered: Jun 2001
Location: UK
Distribution: Gentoo, RHEL, Fedora, Centos
Posts: 43,417
|
install a firewall... why don't you have one up and runnign already?? that's what they are there for. note that a port like "3127" could be used by anything that feels like it, don't think that mydoom is the *only* thing to have ever used that port number, and don't think that it's even important, as mydoom is of cours a windows virus so is irrelevant in a linux context.
|
|
|
04-10-2006, 03:40 AM
|
#3
|
LQ Newbie
Registered: Apr 2005
Posts: 4
Original Poster
Rep:
|
thanks
what do you suggest
and where can i find it?
|
|
|
04-10-2006, 03:58 AM
|
#4
|
Moderator
Registered: Jun 2001
Location: UK
Distribution: Gentoo, RHEL, Fedora, Centos
Posts: 43,417
|
it? you've not even said what distro you're using so i can't tell you how to start the one that's bound to already be installed... we're not psychic.
|
|
|
04-10-2006, 04:14 AM
|
#5
|
LQ Newbie
Registered: Apr 2005
Posts: 4
Original Poster
Rep:
|
New Installation
Fedora Core 5
|
|
|
04-10-2006, 07:16 AM
|
#6
|
Member
Registered: Apr 2006
Location: Cape Town, South Africa
Distribution: Gentoo 2006.1(2.6.17-gentoo-r7)
Posts: 222
Rep:
|
Quote:
Originally Posted by deadv
thanks
what do you suggest
and where can i find it?
|
if you are a n00b and dont know how to c0de IPtables rules/chains use
IPkungfu
it's so simple...
|
|
|
04-10-2006, 09:41 AM
|
#7
|
Moderator
Registered: Jun 2001
Location: UK
Distribution: Gentoo, RHEL, Fedora, Centos
Posts: 43,417
|
why? FC5 has a perfectly capable firewall in it. Quite why anyone would deploy a server on FC5 is another matter though. just run "system-config-firewall"
|
|
|
All times are GMT -5. The time now is 12:45 PM.
|
LinuxQuestions.org is looking for people interested in writing
Editorials, Articles, Reviews, and more. If you'd like to contribute
content, let us know.
|
Latest Threads
LQ News
|
|