🚀 go-pugleaf

Steve Dodd wrote:
> 
> Paul Richards <pauldoo@dunvegan1.demon.co.uk> wrote:
> 
> > I've recently got my Linux (Debian) box set up back to how it was before
> > I broke it.  (Well M$ FDISK decided to make a FAT32 partition overlap my
> > EXT2 which was nice when I tried to format the FAT32..)  What should I
> > do to make the system more secure?  I no longer have dual boot, only
> > Linux because I was pissed off with what M$ FDISK done.
> 
> My advice is probably going to sound patronising, but it's not supposed to
> be: basically, get to know your system, and understand how things work.
> When you say you want your system "secure", presumably you mean w.r.t. people
> getting in over the internet, rather than security on the console.
> Look at everything that's listening for connections / packets (netstat -t -u
> -l works for me), decide if you need it running or not. For those that you
> do need running, read the docs, look at any configuration options, etc.

OK here goes:
tcp        0      0 *:4666                  *:*                    
LISTEN      
tcp        0      0 *:1239                  *:*                    
LISTEN      
tcp        0      0 *:1177                  *:*                    
LISTEN      
tcp        0      0 *:1176                  *:*                    
LISTEN      
tcp        0      0 *:1175                  *:*                    
LISTEN      
tcp        0      0 *:1174                  *:*                    
LISTEN      
tcp        0      0 *:1173                  *:*                    
LISTEN      
tcp        0      0 *:1172                  *:*                    
LISTEN      
tcp        0      0 *:1171                  *:*                    
LISTEN      
tcp        0      0 *:1164                  *:*                    
LISTEN      
tcp        0      0 *:6000                  *:*                    
LISTEN      
tcp        0      0 *:4383                  *:*                    
LISTEN      
No idea what those were

tcp        0      0 *:nntp                  *:*                    
LISTEN      
My NTP server???

tcp        0      0 *:ftp                   *:*                    
LISTEN      
I need this

tcp        0      0 *:www                   *:*                    
LISTEN      
And this

tcp        0      0 *:5865                  *:*                    
LISTEN      
tcp        0      0 *:55556                 *:*                    
LISTEN      
tcp        0      0 *:5556                  *:*                    
LISTEN      
tcp        0      0 *:omniorb               *:*                    
LISTEN      
tcp        0      0 *:9111                  *:*                    
LISTEN      
tcp        0      0 *:803                   *:*                    
LISTEN      
No idea

tcp        0      0 *:printer               *:*                    
LISTEN      
Do I need this?  lpr does the printing AFAIK

tcp        0      0 *:socks                 *:*                    
LISTEN      
No idea

tcp        0      0 *:auth                  *:*                    
LISTEN      
Am I a PAP server or something stupid?

tcp        0      0 *:vboxd                 *:*                    
LISTEN      
tcp        0      0 *:saft                  *:*                    
LISTEN      
No idea

tcp        0      0 *:finger                *:*                    
LISTEN      
I know this one, but DoS attacks can come from this right?

tcp        0      0 *:smtp                  *:*                    
LISTEN      
tcp        0      0 *:pop3                  *:*                    
LISTEN      
I need those two, but perhaps I could place IP restrictions...  ?

tcp        0      0 *:telnet                *:*                    
LISTEN      
Need this

tcp        0      0 *:time                  *:*                    
LISTEN      
Or is this my NTP server???

tcp        0      0 *:daytime               *:*                    
LISTEN      
tcp        0      0 *:discard               *:*                    
LISTEN      
tcp        0      0 *:sunrpc                *:*                    
LISTEN      
No idea what those were



OK chaps, enlighten me.
-- 
Paul Richards (Pauldoo) - http://www.pauldoo.co.uk

I've not ran any Microsoft code for 1351078 seconds.
    How about you?