[ale] How do I disable port 978udp?

[Randolph C. Karrh jr.]

Stephen & Jim :

Thanks for the help, I have check the system throughly for a rootkit and
have not found one, nor could it find any unauthorized entries.
I used the iptables command and it seems to be blocked for now.

thanks again

Randy


Quoting stephen <stephen at phynp6.phy-astr.gsu.edu>:

> On Thu, Oct 17, 2002 at 08:24:53PM -0400, James P. Kinney III wrote:
> > iptables -I INPUT -p udp --dport 978 -j DROP
> 
> Although this prevent packets from being passed
> up to the app, you may want to just to turn the
> service off, especially if you don't know what
> it is.
> 
> > 
> > On Thu, 2002-10-17 at 17:43, Randolph C. Karrh jr. wrote:
> > > Greetings Aler's:
> > > 
> > > How does one disable a weird port such as 978/udp ?
> 
> Assuming you don't own the process, try a 'netstat -lnup'
> (which lists listening udp sockets) as root, look for the
> pid of the process that owns the socket, and KILL it.
> You may even be kind enough to send it a TERM sig first.
> And then disable the startup script for the service.
> 
> stephen
> 
> ---
> This message has been sent through the ALE general discussion list.
> See http://www.ale.org/mailing-lists.shtml for more info. Problems should be
> 
> sent to listmaster at ale dot org.
> 
> 
> 


May the world work for you and not against you!

-------------------------------------------------
This email was created using http://www.horde.org
IMP program running on http://mail.newriverplt.com 

---
This message has been sent through the ALE general discussion list.
See http://www.ale.org/mailing-lists.shtml for more info. Problems should be 
sent to listmaster at ale dot org.