Topic: How do I diable port 25 & 389???

[Michael Roed]

I need to disable ports 25 and 389!

How can I do that entirely???

Thanx,
Michael

[Michael Roed]

I use ver. 5.6 !

[Sonny]

trye seaching for a service control panel for the server-manager panel....
I know it is out there, but i can't remember where i have seen it
With this pannel you have fuly control ower what system's/servers that runs on your system!

I wil trye to see if i can re-locate the rpm, and post the link here later!

[jeroen]

Sonny wrote:
>
> trye seaching for a service control panel for the
> server-manager panel....
> I know it is out there, but i can't remember where i have
> seen it
> With this pannel you have fuly control ower what
> system's/servers that runs on your system!
>
> I wil trye to see if i can re-locate the rpm, and post the
> link here later!

Haven't seen that panel yet for 5.6.

jeroen

[Michael Roed]

I already got the service panel (it works fine for 5.6!) but I cant fully control which ports is in use on th E-smith.

I found out that I had to terminate the Qmail for port 25 to get free!!

/michael.

[Nathan Fowler]

You could use ipchains.  The best way would be to stop the services, but if you would rather leave them running, you can simply deny access to these ports.

/sbin/ipchains -A input -p tcp --dport 389 -j DENY
/sbin/ipchains -A input -p tcp --dport 25 -j DENY

If you just want to deny access on the external interface (assuming you're in server-gateway mode), then use:

/sbin/ipchains -A input -p tcp --dport 389 -j DENY -i ethX
/sbin/ipchains -A input -p tcp --dport 25 -j DENY -i ethX

Where X is the interface number, such as eth0, or eth1.

You could also deny access to these ports for everyone EXCEPT your local netmask, assuming your netmask is 192.168.0.0/24

/sbin/ipchains -A input -p tcp --source ! 192.168.0.0/24 --dport 389 -j DENY
/sbin/ipchains -A input -p tcp --source ! 192.168.0.0/24 --dport 25 -j DENY

Add these rules to the bottom of /etc/rc.d/rc.local if you want to execute them on reboot.

Nathan

[Michael Roed]

Thanx, Nathan!

That was just what I needed !!!  )

/Michael.

[Nathan Fowler]

Anytime, glad I could help.