RE: who closed my networking ports?



Dr Bean wrote:

I have apparently only 22 (ssh) and 631 (ipp, ie
cups) open, but
I can't work out why other ports are closed when on
IRC I am told
debian doesn't set up a firewall by default.

Simple: If you haven't got any network services
running besides cups and ssh, then no ports besides
631 (cups) and 22 (sshd) are open because no services
are listening behind them. A port just means a
daemon/service listening for incoming traffic. So no
open ports means no services listening and that should
suit you.
A "firewall" is needed if you want to filter access to
offered networking services. It is unneccessary if you
do not want to offer services to the internet because
you can shut them down or just let them listen to
localhost (at least, you can do that with cups and
ssh). To do that for cups, you just put these lines in
/etc/cups/cupsd.conf:
listen localhost:631
Browsing = off (or Browsing off , I just can't
remember which right now)
Now, cups will only listen on localhost (127.0.0.1).

Cheers
Roman



___________________________________________________________
Telefonate ohne weitere Kosten vom PC zum PC: http://messenger.yahoo.de


--
To UNSUBSCRIBE, email to debian-user-REQUEST@xxxxxxxxxxxxxxxx
with a subject of "unsubscribe". Trouble? Contact listmaster@xxxxxxxxxxxxxxxx



Relevant Pages

  • Re: IT Survival on Linux.
    ... > connections instead of those you approve. ... > box doesn't need to run any services, and thus have no open listening ... > ports anyway. ... Anyway I don't think a firewall can hurt, its kind of the same thing that ...
    (alt.os.linux)
  • Re: Starting iptables
    ... it is not clear that you need a firewall at all. ... just don't open any ports. ... "netstat -putl" will let you find out what listening ports are open. ... mysql is listening on tcp port 3306. ...
    (Debian-User)
  • Re: Closing Ports
    ... you can physically open and close ports but it's ... the work - and I highly recommend a hardware firewall over ...
    (microsoft.public.security)
  • Re: Closing Ports
    ... you can physically open and close ports but it's ... > the work - and I highly recommend a hardware firewall over ...
    (microsoft.public.security)
  • Re: Trouble accessing Outlook Web Access from behind firewall
    ... When starting the firewall I also set ... > rejected and dropped packets are logged, however I see nothing in my log ... > # Higher ports needed to accept incoming/outgoing calls ...
    (comp.security.firewalls)