[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: [cobalt-security] Disable Services / ports



I had a company called RackAid, www.rackaid.com , lock our servers down.
They know Raqs in and out, fast service, and very resonable prices.

jimmy

----- Original Message -----
From: "Vincent Jordan" <vjordan@xxxxxxxxxxxxxxx>
To: "Cobalt Securoty Mailing List" <cobalt-security@xxxxxxxxxxxxxxx>
Sent: Friday, February 28, 2003 11:52 PM
Subject: [cobalt-security] Disable Services / ports


> I have recently been given the opportunity to takeover as an administrator
> for several raq4r and raq4i server appliances. Due to a staffing situation
> I'm the only "qualified" tech to administer these boxes. Coming from a
> windows server world I feel a little overwhelmed.
>
> I scanned some of our boxes and have noticed several ports / services open
> that I would like to see disabled.
>
> I would like to close the following ports and services.
> port 143 imap
> port 123 NTP
> port 161 SNMP
>
> I have questions about the following ports:
> udp port 42 NAME  this I believe is for WINS replication. I do not believe
I
> need this                                                 service
> running.
> udp port 123 NTP This is the network time protocol. don't think I will
need
> that for hosting       web pages.
> udp port 514 syslog. I don't believe I have any other servers / devices
> reporting to this    server, don't think I need it.
> udp port 520 router. I don't believe I will be using this service unless
it
> works with the                dns routing.
>
> I am sending this email along with the task of researching documentation
to
> solve these issues. I appreciate any help that can be offered. just for
> reference please refrain from flames, everyone started as a newbie.
>
> thanks in advance,
>
> V. Jordan
> MSL Internet Solutions
> Box 154
> Davidsville PA 15928
> http://www.mslnetworks.net
> 814-349-8174
>
> _______________________________________________
> cobalt-security mailing list
> cobalt-security@xxxxxxxxxxxxxxx
> http://list.cobalt.com/mailman/listinfo/cobalt-security
>