Koozali.org: home of the SME Server

security issues

stephan

security issues
« on: March 01, 2001, 01:32:45 AM »
When I goto www.grc.com it shows that the ports 21, 25, 80 and 113 are wide open. I don't use the ftp or host a website (actually not allowed by my isp). Does this create a security risk?  Is there any way to close them?

thanks in advance,

Stephan
the Netherlands

Gordon Rowell

Enabled services (was Re: security issues)
« Reply #1 on: March 01, 2001, 01:38:14 AM »
stephan wrote:

If you believe there are security issues, please report them to
security@e-smith.com Public forums are not an appropriate place to raise
security concerns in the first instance. As it happens, none of the issues you
raise are security concerns.

> When I goto www.grc.com it shows that the ports 21, 25, 80
> and 113 are wide open.

As you would expect from a server which supports FTP, mail and HTTP.
Port 113 is for ident, which is required to talk with some mail servers (it
shouldn't be, but some require it).

> I don't use the ftp or host a website
> (actually not allowed by my isp). Does this create a security
> risk?  

e-smith chooses the most appropriate tools and limits access as much
as is possible.

> Is there any way to close them?

http://www.e-smith.org/docs/manual

will tell you how to turn off FTP. Turning off the other services can be done through
the configuration database if this is desired.

We provide unlimited technical support to our registered customers, and would
be happy to help registered customers with this.

Gordon

stephan

Re: Enabled services (was Re: security issues)
« Reply #2 on: March 01, 2001, 12:30:17 PM »
Ok.....thank you very much for your time.

stephan