sunrpc

[qweqwe]

Hi all,

when i scaned my computer using nmap ..it showed sunrpc 111/open ..i opened my etc/services file and commented out sunrpc line ..restarted my machine ..it still shows sunrpc port open ..how to close this port ...thanks

qweqwe

[JBrian]

/etc/services is only used for reference, it doesn't really control anything. I think that in linux, the rpc portmapper is run under /etc/inetd, so you want to edit /etc/inetd.conf. Then you can restart inetd with "killall -HUP inetd".

Its generally better to scan yourself from an external machine. <A HREF="http://crypto.yashy.com/nmap.php" TARGET=_blank>
crypto.yashy.com/nmap.php</A> is a good web based scanner...
~Jeff

[qweqwe]

thanks ..i think u meant inet.conf ..i checked the file ..i hv only telnet uncommented. rest all the services are commetned. I am using RH 6.2.

thanks,
qweqwe

[The King Ant]

sunrpc is portmapper. I believe it is started as a service via the init scripts in /etc/rc.d/. You probably don't need it for anything, and could just uninstall it.

Try "rpm -qf /etc/rc.d/init.d/portmap" to see what rpm package it is from, then "rpm -e packagename" to uninstall it. It might say it's needed by nfs or something, and you may have to uninstall that too.

Or, to just disable it, change the symlinks in /etc/rc.d/rc3.d and /etc/rc.d/rc5.d Just mv from S##portmap to K##portmap (s stands for "start", k stands for "kill").