 |
 |
 |
 |
|
>> Read No. 8988 article |
|
|
[질문] 포트막는 법
|
 |
 |
 |
 |

등록 2000-10-21 09:47:00
조회 1
이름 초초보

|
 |
 |
서버 진단을 받아보니깐.. 포트가 많이 열려있더라고 하더군요..
어디서 줏어 들은 얘기론.. /etc/services에 있는 걸 필요한거 빼고 주석처리 한담에 inetd를 rest
art하믄 댄다구 하던데.. (맞나? -_-;;) 글구.. 물론 inetd.conf 파일도 바꿔야죠, restart하기 전에.
. 제가 하고 싶은건, ftp,telnet,sendmail,pop3,web/dns서버로 쓰려고 하는데..
포트가 많은건지.. 뭐가 몬지 잘 모르겠더군요.. services 목록이 하도 길어서..
어딜 어떻게 고쳐야 하는지 아시는 분.. 좀 도와주시면 고맙겠습니다.. ㅠ_ㅠ
현재 고쳐놓은 상탠데.. 맞는지도 모르겠고.. 좀 봐주세요~
/etc/services
# $Id: services,v 1.4 2000/01/23 21:03:36 notting Exp $
#
# Network services, Internet style
#
# Note that it is presently the policy of IANA to assign a single well-known
# port number for both TCP and UDP; hence, most entries here have two entries
# even if the protocol doesn't support UDP operations.
# Updated from RFC 1700, ``Assigned Numbers'' (October 1994). Not all ports
# are included, only the more common ones.
tcpmux 1/tcp # TCP port service multiplexer
echo 7/tcp
echo 7/udp
#discard 9/tcp sink null
#discard 9/udp sink null
#systat 11/tcp users
daytime 13/tcp
daytime 13/udp
netstat 15/tcp
qotd 17/tcp quote
#msp 18/tcp # message send protocol
#msp 18/udp # message send protocol
chargen 19/tcp ttytst source
chargen 19/udp ttytst source
ftp-data 20/tcp
ftp 21/tcp
#fsp 21/udp fspd
#ssh 22/tcp # SSH Remote Login Protocol
#ssh 22/udp # SSH Remote Login Protocol
telnet 23/tcp
# 24 - private
smtp 25/tcp mail
# 26 - unassigned
#time 37/tcp timserver
#time 37/udp timserver
rlp 39/udp resource # resource location
nameserver 42/tcp name # IEN 116
whois 43/tcp nicname
re-mail-ck 50/tcp # Remote Mail Checking Protocol
re-mail-ck 50/udp # Remote Mail Checking Protocol
domain 53/tcp nameserver # name-domain server
domain 53/udp nameserver
#mtp 57/tcp # deprecated
#bootps 67/tcp # BOOTP server
#bootps 67/udp
#bootpc 68/tcp # BOOTP client
#bootpc 68/udp
#tftp 69/udp
#gopher 70/tcp # Internet Gopher
#gopher 70/udp
#rje 77/tcp netrjs
#finger 79/tcp
www 80/tcp http # WorldWideWeb HTTP
www 80/udp # HyperText Transfer Protocol
link 87/tcp ttylink
kerberos 88/tcp kerberos5 krb5 # Kerberos v5
kerberos 88/udp kerberos5 krb5 # Kerberos v5
#supdup 95/tcp
# 100 - reserved
hostnames 101/tcp hostname # usually from sri-nic
iso-tsap 102/tcp tsap # part of ISODE.
csnet-ns 105/tcp cso-ns # also used by CSO name server
csnet-ns 105/udp cso-ns
# unfortunately the poppassd (Eudora) uses a port which has already
# been assigned to a different service. We list the poppassd as an
# alias here. This should work for programs asking for this service.
# (due to a bug in inetd the 3com-tsmux line is disabled)
#3com-tsmux 106/tcp poppassd
#3com-tsmux 106/udp poppassd
#rtelnet 107/tcp # Remote Telnet
#rtelnet 107/udp
#pop2 109/tcp pop-2 postoffice # POP version 2
#pop2 109/udp pop-2
pop3 110/tcp pop-3 # POP version 3
pop3 110/udp pop-3
#sunrpc 111/tcp portmapper # RPC 4.0 portmapper TCP
#sunrpc 111/udp portmapper # RPC 4.0 portmapper UDP
auth 113/tcp authentication tap ident
#sftp 115/tcp
#uucp-path 117/tcp
#nntp 119/tcp readnews untp # USENET News Transfer Protocol
#ntp 123/tcp
#ntp 123/udp # Network Time Protocol
netbios-ns 137/tcp # NETBIOS Name Service
netbios-ns 137/udp
netbios-dgm 138/tcp # NETBIOS Datagram Service
netbios-dgm 138/udp
netbios-ssn 139/tcp # NETBIOS session service
netbios-ssn 139/udp
#imap2 143/tcp imap # Interim Mail Access Proto v2
#imap2 143/udp imap
#snmp 161/udp # Simple Net Mgmt Proto
#snmp-trap 162/udp snmptrap # Traps for SNMP
#cmip-man 163/tcp # ISO mgmt over IP (CMOT)
#cmip-man 163/udp
#cmip-agent 164/tcp
#cmip-agent 164/udp
#xdmcp 177/tcp # X Display Mgr. Control Proto
#xdmcp 177/udp
#nextstep 178/tcp NeXTStep NextStep # NeXTStep window
#nextstep 178/udp NeXTStep NextStep # server
bgp 179/tcp # Border Gateway Proto.
bgp 179/udp
#prospero 191/tcp # Cliff Neuman's Prospero
#prospero 191/udp
#irc 194/tcp # Internet Relay Chat
#irc 194/udp
#smux 199/tcp # SNMP Unix Multiplexer
#smux 199/udp
#at-rtmp 201/tcp # AppleTalk routing
#at-rtmp 201/udp
#at-nbp 202/tcp # AppleTalk name binding
#at-nbp 202/udp
#at-echo 204/tcp # AppleTalk echo
#at-echo 204/udp
#at-zis 206/tcp # AppleTalk zone information
#at-zis 206/udp
#qmtp 209/tcp # The Quick Mail Transfer Protocol
#qmtp 209/udp # The Quick Mail Transfer Protocol
#z3950 210/tcp wais # NISO Z39.50 database
#z3950 210/udp wais
#ipx 213/tcp # IPX
#ipx 213/udp
imap3 220/tcp # Interactive Mail Access
imap3 220/udp # Protocol v3
#rpc2portmap 369/tcp
#rpc2portmap 369/udp # Coda portmapper
#codaauth2 370/tcp
#codaauth2 370/udp # Coda authentication server
#ulistserv 372/tcp # UNIX Listserv
#ulistserv 372/udp
#ldap 389/tcp # Lightweight Directory Access Protocol
#ldap 389/udp # Lightweight Directory Access Protocol
https 443/tcp # MCom
https 443/udp # MCom
#snpp 444/tcp # Simple Network Paging Protocol
#snpp 444/udp # Simple Network Paging Protocol
#saft 487/tcp # Simple Asynchronous File Transfer
#saft 487/udp # Simple Asynchronous File Transfer
#npmp-local 610/tcp dqs313_qmaster # npmp-local / DQS
#npmp-local 610/udp dqs313_qmaster # npmp-local / DQS
#npmp-gui 611/tcp dqs313_execd # npmp-gui / DQS
#npmp-gui 611/udp dqs313_execd # npmp-gui / DQS
#hmmp-ind 612/tcp dqs313_intercell# HMMP Indication / DQS
#hmmp-ind 612/udp dqs313_intercell# HMMP Indication / DQS
#
# UNIX specific services
#
#exec 512/tcp
#biff 512/udp comsat
login 513/tcp
#who 513/udp whod
shell 514/tcp cmd # no passwords used
syslog 514/udp
#printer 515/tcp spooler # line printer spooler
#talk 517/udp
#ntalk 518/udp
route 520/udp router routed # RIP
timed 525/udp timeserver
#tempo 526/tcp newdate
#courier 530/tcp rpc
#conference 531/tcp chat
#netnews 532/tcp readnews
netwall 533/udp # -for emergency broadcasts
#uucp 540/tcp uucpd # uucp daemon
#afpovertcp 548/tcp # AFP over TCP
#afpovertcp 548/udp # AFP over TCP
#remotefs 556/tcp rfs_server rfs # Brunhoff remote filesystem
#klogin 543/tcp # Kerberized `rlogin' (v5)
#kshell 544/tcp krcmd # Kerberized `rsh' (v5)
#kerberos-adm 749/tcp # Kerberos `kadmin' (v5)
#
webster 765/tcp # Network dictionary
webster 765/udp
#swat 901/tcp # Samba Web Administration Tool
#
# From ``Assigned Numbers'':
#
#> The Registered Ports are not controlled by the IANA and on most systems
#> can be used by ordinary user processes or programs executed by ordinary
#> users.
#
#> Ports are used in the TCP [45,106] to name the ends of logical
#> connections which carry long term conversations. For the purpose of
#> providing services to unknown callers, a service contact port is
#> defined. This list specifies the port used by the server process as its
#> contact port. While the IANA can not control uses of these ports it
#> does register or list uses of these ports as a convienence to the
#> community.
#
#ingreslock 1524/tcp
#ingreslock 1524/udp
#prospero-np 1525/tcp # Prospero non-privileged
#prospero-np 1525/udp
#datametrics 1645/tcp old-radius # datametrics / old radius entry
#datametrics 1645/udp old-radius # datametrics / old radius entry
#sa-msg-port 1646/tcp old-radacct # sa-msg-port / old radacct entry
#sa-msg-port 1646/udp old-radacct # sa-msg-port / old radacct entry
#radius 1812/tcp # Radius
#radius 1812/udp # Radius
#radacct 1813/tcp # Radius Accounting
#radacct 1813/udp # Radius Accounting
#cvspserver 2401/tcp # CVS client/server operations
#cvspserver 2401/udp # CVS client/server operations
#venus 2430/tcp # codacon port
#venus 2430/udp # Venus callback/wbc interface
#venus-se 2431/tcp # tcp side effects
#venus-se 2431/udp # udp sftp side effect
#codasrv 2432/tcp # not used
#codasrv 2432/udp # server port
#codasrv-se 2433/tcp # tcp side effects
#codasrv-se 2433/udp # udp sftp side effect
mysql 3306/tcp # MySQL
mysql 3306/udp # MySQL
#rfe 5002/tcp # Radio Free Ethernet
#rfe 5002/udp # Actually uses UDP only
#cfengine 5308/tcp # CFengine
#cfengine 5308/udp # CFengine
#bbs 7000/tcp # BBS service
#
#
# Kerberos (Project Athena/MIT) services
# Note that these are for Kerberos v4, and are unofficial. Sites running
# v4 should uncomment these and comment out the v5 entries above.
#
kerberos4 750/udp kerberos-iv kdc # Kerberos (server) udp
kerberos4 750/tcp kerberos-iv kdc # Kerberos (server) tcp
kerberos_master 751/udp # Kerberos authentication
kerberos_master 751/tcp # Kerberos authentication
passwd_server 752/udp # Kerberos passwd server
krb_prop 754/tcp # Kerberos slave propagation
krbupdate 760/tcp kreg # Kerberos registration
kpasswd 761/tcp kpwd # Kerberos "passwd"
kpop 1109/tcp # Pop with Kerberos
knetd 2053/tcp # Kerberos de-multiplexor
#zephyr-srv 2102/udp # Zephyr server
#zephyr-clt 2103/udp # Zephyr serv-hm connection
#zephyr-hm 2104/udp # Zephyr hostmanager
#eklogin 2105/tcp # Kerberos encrypted rlogin
#
# Unofficial but necessary (for NetBSD) services
#
#supfilesrv 871/tcp # SUP server
#supfiledbg 1127/tcp # SUP debugging
#
# Datagram Delivery Protocol services
#
rtmp 1/ddp # Routing Table Maintenance Protocol
nbp 2/ddp # Name Binding Protocol
#echo 4/ddp # AppleTalk Echo Protocol
#zip 6/ddp # Zone Information Protocol
#
# Services added for the Debian GNU/Linux distribution
#poppassd 106/tcp # Eudora
#poppassd 106/udp # Eudora
#mailq 174/tcp # Mailer transport queue for Zmailer
#mailq 174/udp # Mailer transport queue for Zmailer
#ssmtp 465/tcp # SMTP over SSL
#gdomap 538/tcp # GNUstep distributed objects
#gdomap 538/udp # GNUstep distributed objects
#snews 563/tcp # NNTP over SSL
#ssl-ldap 636/tcp # LDAP over SSL
#omirr 808/tcp omirrd # online mirror
#omirr 808/udp omirrd # online mirror
#rsync 873/tcp # rsync
#rsync 873/udp # rsync
#simap 993/tcp # IMAP over SSL
#spop3 995/tcp # POP-3 over SSL
socks 1080/tcp # socks proxy server
socks 1080/udp # socks proxy server
#rmtcfg 1236/tcp # Gracilis Packeten remote config server
#xtel 1313/tcp # french minitel
#support 1529/tcp # GNATS
#cfinger 2003/tcp # GNU Finger
#ninstall 2150/tcp # ninstall service
#ninstall 2150/udp # ninstall service
#afbackup 2988/tcp # Afbackup system
#afbackup 2988/udp # Afbackup system
#icp 3130/tcp # Internet Cache Protocol (Squid)
#icp 3130/udp # Internet Cache Protocol (Squid)
#postgres 5432/tcp # POSTGRES
#postgres 5432/udp # POSTGRES
#fax 4557/tcp # FAX transmission service (old)
#hylafax 4559/tcp # HylaFAX client-server protocol (new
)
#noclog 5354/tcp # noclogd with TCP (nocol)
#noclog 5354/udp # noclogd with UDP (nocol)
#hostmon 5355/tcp # hostmon uses TCP (nocol)
#hostmon 5355/udp # hostmon uses TCP (nocol)
#ircd 6667/tcp # Internet Relay Chat
#ircd 6667/udp # Internet Relay Chat
webcache 8080/tcp # WWW caching service
webcache 8080/udp # WWW caching service
#tproxy 8081/tcp # Transparent Proxy
#tproxy 8081/udp # Transparent Proxy
#mandelspawn 9359/udp mandelbrot # network mandelbrot
#amanda 10080/udp # amanda backup services
#kamanda 10081/tcp # amanda backup services (Kerberos)
#kamanda 10081/udp # amanda backup services (Kerberos)
#amandaidx 10082/tcp # amanda backup services
#amidxtape 10083/tcp # amanda backup services
#isdnlog 20011/tcp # isdn logging system
#isdnlog 20011/udp # isdn logging system
#vboxd 20012/tcp # voice box system
#vboxd 20012/udp # voice box system
#binkp 24554/tcp # Binkley
#binkp 24554/udp # Binkley
#asp 27374/tcp # Address Search Protocol
#asp 27374/udp # Address Search Protocol
#tfido 60177/tcp # Ifmail
#tfido 60177/udp # Ifmail
#fido 60179/tcp # Ifmail
#fido 60179/udp # Ifmail
# Local services
#linuxconf 98/tcp
거의 다 막을라고 웬만한덴 다 주석처리 했습니다.. 시스템이 잘돌아갈런지.. -_-;;
/etc/inetd.conf
# inetd.conf This file describes the services that will be available
# through the INETD TCP/IP super server. To re-configure
# the running INETD process, edit this file, then send the
# INETD process a SIGHUP signal.
#
# Version: @(#)/etc/inetd.conf 3.10 05/27/93
#
# Authors: Original taken from BSD UNIX 4.3/TAHOE.
# Fred N. van Kempen, <waltje at uwalt.nl.mugnet.org>
#
# Modified for Debian Linux by Ian A. Murdock <imurdock at shell.portal.com>
#
# Modified for RHS Linux by Marc Ewing <marc at redhat.com>
#
# <service_name> <sock_type> <proto> <flags> <user> <server_path> <args>
#
# Echo, discard, daytime, and chargen are used primarily for testing.
#
# To re-read this file after changes, just do a 'killall -HUP inetd'
#
#echo stream tcp nowait root internal
#echo dgram udp wait root internal
#discard stream tcp nowait root internal
#discard dgram udp wait root internal
#daytime stream tcp nowait root internal
#daytime dgram udp wait root internal
#chargen stream tcp nowait root internal
#chargen dgram udp wait root internal
#time stream tcp nowait root internal
#time dgram udp wait root internal
#
# These are standard services.
#
#ftp stream tcp nowait root /usr/sbin/tcpd in.ftpd -l -a
telnet stream tcp nowait root /usr/sbin/tcpd in.telnetd
#
# Shell, login, exec, comsat and talk are BSD protocols.
#
shell stream tcp nowait root /usr/sbin/tcpd in.rshd
login stream tcp nowait root /usr/sbin/tcpd in.rlogind
#exec stream tcp nowait root /usr/sbin/tcpd in.rexecd
#comsat dgram udp wait root /usr/sbin/tcpd in.comsat
#talk dgram udp wait nobody.tty /usr/sbin/tcpd in.talkd
#ntalk dgram udp wait nobody.tty /usr/sbin/tcpd in.ntalkd
#dtalk stream tcp wait nobody.tty /usr/sbin/tcpd in.dtalkd
#
# Pop and imap mail services et al
#
#pop-2 stream tcp nowait root /usr/sbin/tcpd ipop2d
pop-3 stream tcp nowait root /usr/sbin/tcpd ipop3d
#imap stream tcp nowait root /usr/sbin/tcpd imapd
#
# The Internet UUCP service.
#
#uucp stream tcp nowait uucp /usr/sbin/tcpd /usr/lib/uucp/uucico -l
#
# Tftp service is provided primarily for booting. Most sites
# run this only on machines acting as "boot servers." Do not uncomment
# this unless you *need* it.
#
#tftp dgram udp wait root /usr/sbin/tcpd in.tftpd
#bootps dgram udp wait root /usr/sbin/tcpd bootpd
#
# Finger, systat and netstat give out user information which may be
# valuable to potential "system crackers." Many sites choose to disable
# some or all of these services to improve security.
#
#finger stream tcp nowait nobody /usr/sbin/tcpd in.fingerd
#cfinger stream tcp nowait root /usr/sbin/tcpd in.cfingerd
#systat stream tcp nowait guest /usr/sbin/tcpd /bin/ps -auwwx
#netstat stream tcp nowait guest /usr/sbin/tcpd /bin/netstat -f inet
#
# Authentication
#
# identd is run standalone now
#
#auth stream tcp wait root /usr/sbin/in.identd in.identd -e -o
#
# End of inetd.conf
linuxconf stream tcp wait root /bin/linuxconf linuxconf --http
현재 설정은 이렇습니다.. 맞나요? -_-;;;
 | |
|
|
|
|
페이지로딩: [ 1.30 초 ]
작업시간: [ 0.12 초 ]
|
|
 |
 |
![[TOP]](/images/color///top.gif) 
|
 |
 |
 |
 |
|
|