UNIX for Dummies Questions & Answers

When I scan my linux box for open ports, i have several of them, but they shouldn't be open. I removed the lines for them in /etc/services, and left just stuff like telnet, ssh, ftp. Why are they still open? I've restarted the network, and I've even restarted my box, but they still apear as open. Any idea?

Don't touch them in /etc/services... that basically just maps the port numbers to service names... If you remember what you took out, put it back!

You need to check /etc/inetd.conf (in most cases) for any un-commented lines (without a "#" at the beginning of the line), then restart inetd ("killall -1 inetd" will force inetd to restart on the fly).

In some cases, you'll need to also check "xinetd" (some Linux variants use it, like newer Redhat versions). And to disable some of the other services, you have to disable them from the rc startup scripts.

Please respond with the Linux variant and version you are using, and I'll do my best to help.

Thx for your reply.

Whoops.. ok, I've putted everything back. I'm using Mandrake 8.1, with xinetd. So I have to look in the /etc/xinetd.conf and /etc/xinetd.d for those running services, I guess.

Yup, and see if you are running anything from (I think it's in the) /etc/rc.d directory. Mandrake may have inherited a tool from Redhat called something like "ntsysv" or "sysvnt"... It's a quick tool to edit your startup stuff from your default runlevel...

If I can remember exactly where they are / what to do I'll post back.

"sysvnt" was the correct one.
Thx again for your help!