Re: security risk of having a long list of services in inetd



Paul Dufresne <dufresnep@xxxxxxxxx> schrieb:
From: Paul Dufresne <dufresnep@xxxxxxxxx>
Looking to /etc/services, I found that Debian seems to like to have a
very big file with all known services rather than just add the
services needed. I don't even knows if other distributions does just
add the needed services.

That file is just a mapping of service names and ports, it has no relation
to services that are actually running.

Yes, I know. But as I see it, each mapping is like a *possible* door
to the Internet.

No, each *port* is like a possible door to the internet. /etc/services
is just a way to give ports names, regards if those ports are used or
not.

When there is so much, it become too hard to look at each door to see
if there is a program behind, and if it does what it should.

"netstat -plunt" will show you exactly which programs are listening on
which port.


Thomas Weinbrenner
--
Freiheit statt Angst 2008 -- Groß-Demonstration in Berlin!
Samstag, 11. Oktober 2008 um 14 Uhr am Alexanderplatz
http://www.freiheitstattangst.de


--
To UNSUBSCRIBE, email to debian-user-REQUEST@xxxxxxxxxxxxxxxx
with a subject of "unsubscribe". Trouble? Contact listmaster@xxxxxxxxxxxxxxxx



Relevant Pages

  • Re: cisco pix 515 port forwarding - NOT possible? hard to believe..
    ... :ports and it also fails. ... :it may have something to do with "interface" in the static mapping ... Do not mix mapping an entire IP with mapping ports of the same IP. ... This only applies to the interface IP: you would still use host x.x.112.147 ...
    (comp.dcom.sys.cisco)
  • Re: Port number to open inorder to map a drive
    ... Generally ports 135, 137-139, and 445 tcp/upd are associated with browsing and file ... and print sharing. ... Since you are just interested in mapping a drive, ... Could not find the server from the ...
    (microsoft.public.win2000.security)
  • Re: undeploy issue
    ... Are you using a mapping on one of your recieve or send ports? ... the case before undeploying an assembly you must import a new binding ...
    (microsoft.public.biztalk.general)
  • Re: TCP/IP-Filter-Kriterien
    ... Bei Ersterem weis ich jetzt nicht genau, welche Ports da involviert sind. ... Locatordienst für das Mapping von Ports zu aktiven Instanzen. ...
    (microsoft.public.de.german.windows.server.networking)
  • security risk of having a long list of services in inetd
    ... I don't even knows if other distributions does just ... That file is just a mapping of service names and ports, ... it become too hard to look at each door to see ... To UNSUBSCRIBE, email to debian-user-REQUEST@xxxxxxxxxxxxxxxx ...
    (Debian-User)