Open Services

talat · 06-20-2007, 04:51 AM

Hi Guys

When i nmap to my solaris 10 box i see following services

22/tcp open ssh
25/tcp open smtp
80/tcp open http
513/tcp open login
514/tcp open shell
587/tcp open submission
6000/tcp open X11
6112/tcp open dtspc
7100/tcp open font-service
32773/tcp open sometimes-rpc9
32774/tcp open sometimes-rpc11

except ssh,smtp,http i am not sure about others.I want to disable others.Plz guide

Regard
Talat

jschiwal · 06-20-2007, 06:43 AM

Take a look at /etc/services. For example:

Code:

login           513/tcp    # remote login a la telnet;
who             513/udp    # maintains data bases showing who's
shell           514/tcp    # cmd
syslog          514/udp
dtspcd          6112/tcp   # dtspcd
dtspcd          6112/udp   # dtspcd
font-service    7100/tcp    # X Font Service
font-service    7100/udp    # X Font Service
filenet-cm      32773/tcp   # FileNET Component Manager
filenet-cm      32773/udp   # FileNET Component Manager
filenet-re      32774/tcp   # FileNET Rules Engine
filenet-re      32774/udp   # FileNET Rules Engine

Also look at /etc/inetd.conf:
grep -v '^#' /etc/inetd.conf
This will look at running services.
If you have rsh, rlogin and telnet installed, you might consider uninstalling them unless your system is setup where they are needed by other services. You probably don't need who. At least in Linux, xfs isn't used any more. You could try commenting it out from xorg.conf.

jlliagre · 06-20-2007, 03:17 PM

Solaris 10 11/06 and newer prompts you at installation time for enabling the "Secure by default" feature.

http://partneradvantage.sun.com/prot...e-default.html

As you are using an older version or didn't activate secure by default, the Solaris Security Toolkit can help you securing your system:

http://www.sun.com/software/security/jass/

talat · 06-21-2007, 09:18 AM

Thanks for the reply guys

Regard
Talat