[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
[ale] unidentified processes
- Subject: [ale] unidentified processes
- From: jkinney at localnetsolutions.com (James P. Kinney III)
- Date: 17 Dec 2001 20:45:28 -0500
For maximum security on a firewall, run NOTHING but firewall code. Have
no other code on the box. Have no compiler. Have the file system marked
immutable. Have no more space on the drives. Run everything from a CD.
Require blood samples on root login. Chilipowder retina scan to change
permissions on any file. And that's just for the nice people, like
admins ;)
For the users who request that "holes" be opened for their stuff, refer
them to the SouthPark "Cartman's Anal Probe" show for suggestions on
user authentication.
On Mon, 2001-12-17 at 20:15, John Wells wrote:
> In addition to ftp and ssh, I have two processes
> running on ports 111 and 1024. They both seem to work
> with rpc, and are the portmapper and rpc.statd
> respectively.
>
> Can I disable these processes without any effect to my
> system? If so, I assume I just remove the links to
> the startup scripts from my runlevel's startup
> directory.
>
> Also, how insecure is it to run ftp on my
> router/firewall box?
>
> Thanks,
> John
>
> __________________________________________________
> Do You Yahoo!?
> Check out Yahoo! Shopping and Yahoo! Auctions for all of
> your unique holiday gifts! Buy at http://shopping.yahoo.com
> or bid at http://auctions.yahoo.com
>
> ---
> This message has been sent through the ALE general discussion list.
> See http://www.ale.org/mailing-lists.shtml for more info. Problems should be
> sent to listmaster at ale dot org.
>
--
James P. Kinney III \Changing the mobile computing world/
President and COO \ one Linux user /
Local Net Solutions,LLC \ at a time. /
770-493-8244 \.___________________________./
GPG ID: 829C6CA7 James P. Kinney III (M.S. Physics)
<jkinney at localnetsolutions.com>
Fingerprint = 3C9E 6366 54FC A3FE BA4D 0659 6190 ADC3 829C 6CA7
This is a digitally signed message part