From owner-freebsd-questions Wed Jul 24 5: 2: 3 2002 Delivered-To: freebsd-questions@freebsd.org Received: from mx1.FreeBSD.org (mx1.FreeBSD.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 6FACA37B400 for ; Wed, 24 Jul 2002 05:02:01 -0700 (PDT) Received: from pressure.noc.uk.easynet.net (pressure.noc.uk.easynet.net [195.40.7.165]) by mx1.FreeBSD.org (Postfix) with ESMTP id 71F3D43E31 for ; Wed, 24 Jul 2002 05:02:00 -0700 (PDT) (envelope-from marc.silver@uk.easynet.net) Received: by pressure.noc.uk.easynet.net (Postfix, from userid 1332) id 1DEFA6C811; Wed, 24 Jul 2002 13:01:57 +0100 (BST) Date: Wed, 24 Jul 2002 13:01:57 +0100 From: Marc Silver To: Grant Cooper Cc: questions@FreeBSD.ORG Subject: Re: port scanner found my SMTP / SSH is up and I didn't put them there!!!! Message-ID: <20020724120157.GA90693@uk.easynet.net> References: <200207240830.g6O8UJt23230@splat.grant.org> <006201c23307$bd8fa2d0$2afececd@TCOOPER> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: <006201c23307$bd8fa2d0$2afececd@TCOOPER> User-Agent: Mutt/1.4i Sender: owner-freebsd-questions@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.ORG Hi there, On Wed, Jul 24, 2002 at 05:46:25AM -0600, Grant Cooper wrote: > I used a port scanner on my server just to check things out. I wasn't > expecting this. Port 22 (ssh) and port (25) SMTP are up. I looked in > /etc/inetd.conf and SMTP is comented out. SMTP is not controlled via /etc/inetd.conf. See /etc/rc.conf (and /etc/defaults/rc.conf) for more information on how to disable this. You can also disable ssh via this method. > I created a webmailer and sure enough, all my e-mail was recieved but > not sent out. If this isn't a default set up i've been compramised. :( > I don't even know how to use ssh yet. The only reason I noticed this > is because I was setting up my firewall using IPFW. These services usually run by default on newly installed FreeBSD machines. Did you specifically disable them, or is this a newly installed machine which you've now noticed has open ports? :) If it's just a new install you have nothing to worry about, since these run by default on most installations. - Marc -- Marc Silver - Systems Developer http://www.easynet.net/ Phone: +44 20 7032 2064 To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-questions" in the body of the message