Skip site navigation (1)Skip section navigation (2)
Date:      Mon, 8 Apr 2002 17:31:04 +0200
From:      "Ian Barnes" <ian@cerebellum.za.net>
To:        "Mr Munkeh" <munk3h02@yahoo.co.uk>
Cc:        "FreeBSD Questions" <questions@FreeBSD.ORG>
Subject:   RE: FreeBSD Security
Message-ID:  <FHEJKDPFENCDIBKGNOLJOEIBCFAA.ian@cerebellum.za.net>
In-Reply-To: <20020408144125.8556.qmail@web14406.mail.yahoo.com>

next in thread | previous in thread | raw e-mail | index | archive | help

[-- Attachment #1 --]
Hi,

you can close some of the above ports in your /etc/inetd.conf ... and the
others wll be disabled in /etc/rc.conf (sshd for ex), go through the file
/etc/defaults/rc.conf and then take out what you want.

Ian

------------------------
BOFH - Mom's Pharmacies
Emal: ian@cerebellum.za.net
------------------------


  -----Original Message-----
  From: owner-freebsd-questions@FreeBSD.ORG
[mailto:owner-freebsd-questions@FreeBSD.ORG]On Behalf Of Mr Munkeh
  Sent: 08 April 2002 04:41
  To: freebsd-questions@FreeBSD.ORG
  Subject: FreeBSD Security


  hi im looking for some security help on FreeBSD, im using it as a
workstation pc and not as a server so i dont want to be hosting any services
to the outside world, im using FreeBSD 4.5-STABLE and have the following
open ports:

  Port       State       Service
  22/tcp     open        ssh
  25/tcp     open        smtp
  514/udp    open        syslog
  587/tcp    open        submission
  2504/tcp   open        unknown

  how do i close all none needed ports so other people cant access them and
does anyone recommend a good firewall program thats in the ports system? i
have used portsentry but had some errors, something about stealth, i had a
look on google but didnt find any documentation that could help. If anyone
knows how to get portsentry working or recommends another firewall please
email me, thanks.

  -Munk3h





----------------------------------------------------------------------------
--
  Do You Yahoo!?
  Get personalised at My Yahoo!.

[-- Attachment #2 --]
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META http-equiv=Content-Type content="text/html; charset=iso-8859-1">
<META content="MSHTML 6.00.2713.1100" name=GENERATOR></HEAD>
<BODY>
<DIV><SPAN class=210222815-08042002><FONT face=Arial color=#0000ff 
size=2>Hi,</FONT></SPAN></DIV>
<DIV><SPAN class=210222815-08042002><FONT face=Arial color=#0000ff 
size=2></FONT></SPAN>&nbsp;</DIV>
<DIV><SPAN class=210222815-08042002><FONT face=Arial color=#0000ff size=2>you 
can close&nbsp;some of the&nbsp;above ports in your /etc/inetd.conf ... and the 
others wll be disabled in /etc/rc.conf (sshd for ex), go through the file 
/etc/defaults/rc.conf and then take out what you want.</FONT></SPAN></DIV>
<DIV><SPAN class=210222815-08042002><FONT face=Arial color=#0000ff 
size=2></FONT></SPAN>&nbsp;</DIV>
<DIV><SPAN class=210222815-08042002><FONT face=Arial color=#0000ff 
size=2>Ian</FONT></SPAN></DIV>
<DIV>&nbsp;</DIV>
<P><FONT size=2>------------------------<BR>BOFH - Mom's Pharmacies<BR>Emal: 
ian@cerebellum.za.net<BR>------------------------<BR></FONT></P>
<BLOCKQUOTE>
  <DIV class=OutlookMessageHeader dir=ltr align=left><FONT face=Tahoma 
  size=2>-----Original Message-----<BR><B>From:</B> 
  owner-freebsd-questions@FreeBSD.ORG 
  [mailto:owner-freebsd-questions@FreeBSD.ORG]<B>On Behalf Of </B>Mr 
  Munkeh<BR><B>Sent:</B> 08 April 2002 04:41<BR><B>To:</B> 
  freebsd-questions@FreeBSD.ORG<BR><B>Subject:</B> FreeBSD 
  Security<BR><BR></FONT></DIV>
  <P>hi im looking for some security help on FreeBSD, im using it as a 
  workstation pc and not as a server so i dont want to be hosting any services 
  to the outside world, im using FreeBSD 4.5-STABLE and have the following open 
  ports:</P>
  <P>Port&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 
  State&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 
  Service<BR>22/tcp&nbsp;&nbsp;&nbsp;&nbsp; 
  open&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 
  ssh&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 
  <BR>25/tcp&nbsp;&nbsp;&nbsp;&nbsp; 
  open&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 
  smtp&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 
  <BR>514/udp&nbsp;&nbsp;&nbsp; open&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 
  syslog&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 
  <BR>587/tcp&nbsp;&nbsp;&nbsp; open&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 
  submission&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 
  <BR>2504/tcp&nbsp;&nbsp; open&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 
  unknown</P>
  <P>how do i close all none needed ports so other people cant access them and 
  does anyone recommend a good firewall program thats in the ports system? i 
  have used portsentry but had some errors, something about stealth, i had a 
  look on google but didnt find any documentation that could help. If anyone 
  knows how to get portsentry working or recommends another firewall please 
  email me, thanks.</P>
  <P>-Munk3h</P>
  <P><BR>
  <HR SIZE=1>
  <B>Do You Yahoo!?</B><BR>Get personalised at <A 
  href="http://uk.rd.yahoo.com/mail_uk/my?http://uk.my.yahoo.com" 
  target=_blank>My Yahoo!</A>.</BLOCKQUOTE></BODY></HTML>

Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?FHEJKDPFENCDIBKGNOLJOEIBCFAA.ian>