Click to See Complete Forum and Search --> : Securing my new server


Digital Storm
09-20-2003, 11:01 AM
Hello, I've just installed debian 3.0 onto an older machine and have started to lock things down and secure it. The only forwarded port past the router is 22 for ssh...but running nmap I get this...

Port State Service
22/tcp open ssh
111/tcp open sunrpc
113/tcp open auth
515/tcp open printer
1024/tcp open kdm

The box isn't running any sort of desktop, it's just command line and I access it through ssh from both the internal network work and remotely. Is there any way for me to close these opens ports? Also, anyone wouldn't happen to have a link to a guide that explains how to safely and securely install an ftp server? Thanks...

X_console
09-20-2003, 11:21 AM
Those are probably started from somewhere in your /etc/rc.d scripts.

UID500
09-20-2003, 11:23 AM
you can setup a firewall on the server itself, or turn these services off.

if nobody else is on your network, the NAT router should be enough to protect you form the outside. If there are no threats on the local network, you are good.

search for ProFTP secure setup, some guy has a HOWTO in his sig that's good. He might even post here soon.

Digital Storm
09-20-2003, 11:25 AM
Thanks for the replies...It's only a home network so there are no internal threats and I'm pretty much only accessing the linux box through ssh from school...