OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
Subject: Re: [suse-security] Turning of services
From: Francisco M. Marzoa Alonso (fmmarzoaidecnet.com)
Date: Thu Apr 06 2000 - 04:16:42 CDT

Thank u Alan :) I've a firewall in that machine with ipchains too, but we're a
bit paranoid here X)

Let me see apache config files... hummmmmm...

##
## SSL Support
##
## When we also provide SSL we have to listen to the
## standard HTTP port (see above) and to the HTTPS port
##
<IfDefine SSL>
Listen 80
Listen 443
</IfDefine>

This seems really to have anything to see with that...

Well now, i can suppouse if i comment that line (Listen 443) the SSL server
that's listen at this port will be out, but... it should be a better manner but
i cant found were SSL is really *Defined*, should i recompile apache perhaps?

Any hint to do the things as right as possible will be very wellcomed.

Thanks again, Alan, and the rest of the list :)

"Wood, Alan" wrote:

> Hi Francisco,
>
> Well, the place to look for https is in your web browser (Apache I guess).
> Look for key words like secure, SSL and as you could guess - https :-) It
> will definitely be this that is opening this port. Sorry, but I do not know
> much about Apache configuration.
>
> If you really can't find the way to turn off the rest, then you could try
> to
> use ipchains to block access to them. Not ideal, but I would expect it
> to do the trick.
>
> Alan
>
> > I've just installed a SuSE63 in a new machine and i'm trying to leave it
> > just with the essentials services, doing a portscan this is the result:
> >
> > fmmarzoavivaldi:~ > portscan 192.168.66.251
> > 192.168.66.251
> > 22
> > 23
> > 80
> > 113
> > 139
> > 443
> > 514
> > #
> >
> > Well, i want port 22 (ssh), 23 (telnet), 80 (http) and 139 (netbios -
> > sorry, it should serve files to windows clients :/) active, and i know
> > how to deactivate them if i need, but i cant find how to put out 113
> > (auth), 443 (https) and 514 (shell ?).
> >
> >
> > I've travelled through /etc/inetd.conf and /etc/rc.services trying to find
> > an answer for my question but... may m I turning blind?
> >
> > --
> > Francisco M. Marzoa Alonso
> > Nuevo Mundo - Dpto. Informatico ICQ#: 62850923
> > Henri Dunant, 19 - 28036 Madrid tfno: +34 91 343 18 40 ext. 207
> > Espana / Spain fax: +34 91 350 28 45
> >
> >
> >
> >
> > ---------------------------------------------------------------------
> > To unsubscribe, e-mail: suse-security-unsubscribesuse.com
> > For additional commands, e-mail: suse-security-helpsuse.com
> > 

--
Francisco M. Marzoa Alonso
Nuevo Mundo - Dpto. Informático         ICQ#:         62850923
Henri Dunant, 19 - 28036 Madrid         tfno: +34 91 343 18 40 ext. 207
España / Spain                          fax:  +34 91 350 28 45

---------------------------------------------------------------------
To unsubscribe, e-mail: suse-security-unsubscribesuse.com
For additional commands, e-mail: suse-security-helpsuse.com