After nmap ing my linux box I found these ports were open

22/tcp open ssh
111/tcp open rpcbind
1030/tcp open iad1


If I type
telnet localhost 22 or 111 or 1030

I get

Trying 127.0.0.1...
Connected to localhost.
Escape character is '^]'.
SSH-1.99-OpenSSH_3.6.1p2


As I don't know much about telnet, my question is does this mean anyone can connect to my computer this way and do damage??

I am running iptables blocking pretty much everything.

Am I just getting a connection as it is my computer??

If you nmap your computer from your computer, you don't necessarily see correct results; in general, you see the services that are available locally to your machine. To check the connections available from outside, you need to run nmap from outside.

It is generally safe to have ssh/22 open. This is the most popular way to connect to your machine remotedly.

If there is a rpcbind running in that port, I would keep that closed, as well as unknown services, unless you have good reason not to.

Also Regardless of most services that you have running on your system
Anyone will still be able to telnet into your services, this merely means that the service is active. For most of the time if your service is available local chances are its available global too. Unless you have manually set it up to be available locally only or its firewalled off.
But all in all disable 111, and 1030
you can try these commands they may give you a better understanding of the processes:


lsof -i tcp:111
lsof -i tcp:1030 etc
netstat -n
fuser -vu 111/tcp
fuser -vu 1030/tcp

Ive been trying to figure out how to close these unwanted ports for a while now but having no luck!

Do I have to close the programs that are using them?? eg stop rpcbind ??

If that is the case, how do I stop fedora reloading it automatically when I restart next time?

Or is there a line I can add to Iptables to stop this?

Thanks for the help

(ps Im still pretty new to linux so exact commands would be really good!)

Use chkconfig to get an idea of what services and daemons are started at boot as well as to toggle them on/off. Use the service command to turn currently running serivces/daemons on or off. So:

To see what starts at boot:
chkconfig --list
That should give you a list of all the applications and whether they're on or off at a given runlevel. To just see what is turned on:
chkconfig --list | grep on

To then turn an application off at boot:
chkconfig <service_name> off

To stop a currently running daemon use:
service <service_name> stop

So to shutoff rpcbind (aka portmap), do:
chkconfig portmap off
service portmap stop

on your menu in fedora go to system settings, server settings, services
there you have a list of each thing that is loading on your computer find rpc and just uncheck it and file save and reboot.
or run ntsysv as root and just uncheck what ever you dont want and hit ok

Thanks guys

saved me a lot of worries

Danny