Re: [Sheflug] Wierd ports open on Debian box

[Barrie Bremner <nospam [at] barriebremner.com>]

>>>>> "Matthew" == Matthew Palmer <mjp16 [at] ieee.uow.edu.au> writes:

    Matthew> On Mon, 21 May 2001, Barrie Bremner wrote:
    >> 748/tcp open ris-cm 779/tcp open unknown

    Matthew> These are rather odd.  Never seen them around, not open
    Matthew> on this machine (big hulking fileserver, if you're
    Matthew> wondering).

    >> 748 and 779 seem to be related to NFS in someway, but this
    >> didn't

    Matthew> What gives you the idea it's related to NFS?

    >> Why are these extra ports open? How do I close them without
    >> affecting NFS?

    Matthew> What's got them open?  lsof is your friend (lsof -i
    Matthew> tcp:748 and lsof -i tcp:779) and you can shut them down.
    Matthew> If it's inetd that's got them, inetd.conf will fix it.
    Matthew> Otherwise, kill the programs and hunt down the binaries
    Matthew> and either delete them or fix them somehow to stop them
    Matthew> from running when you don't want them to.

Well, I was right:

photon:~# lsof -i tcp:748
COMMAND   PID USER   FD   TYPE DEVICE SIZE NODE NAME
rpc.statd 145 root    1u  IPv4     68       TCP *:748 (LISTEN)
photon:~# lsof -i tcp:779
COMMAND   PID USER   FD   TYPE DEVICE SIZE NODE NAME
rpc.mount 175 root    5u  IPv4    123       TCP *:779 (LISTEN)

About the only thing is that the RPC section of inetd is

#:RPC: RPC based services

nothing else. Maybe rpc.statd and rpc.mountd are getting all funky on
me because of that?

Yours confusedly :-)

Baz. 


-- 
Barrie J. Bremner 		OpenPGP public key ID: 5164F553
baz [at] barriebremner.com	http://barriebremner.com/

baz /baz/ n.
 1. [common] The third metasyntactic variable.
 2. interj. A term of mild annoyance.
 3. Occasionally appended to foo to produce `foobaz'

	-- Jargon File v4.3.0, www.tuxedo.org/jargon

 4. Me.

---------------------------------------------------------------------
Sheffield Linux User's Group - http://www.sheflug.co.uk
To unsubscribe from this list send mail to
- <sheflug-request [at] vuw.ac.nz> - with the word 
 "unsubscribe" in the body of the message. 

  GNU the choice of a complete generation.