Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]

Groups > linux.debian.user > #190179

Re: port scans (OT?)

Show all headers | View raw

On Fri, Dec 22, 2017 at 9:04 PM, Thomas Schmitt <scdbackup@gmx.net> wrote:

> Hi,

Hi

> Run your own port scan and shut down any insecure service that gets found.

Tried that and the firewall caught me and threw me out :-)

So I tried again, slower to stay out of the firewall's window, and the
only peculiar thing that showed up was rpcbind -- I have no idea what
idiot put that there. But that one's blocked at the server by
iptables' default drop.

I'm assuming Postfix, Dovecot, Proftp, Apache2, and openSSH are
smarter than the script kiddies.

So I'm feeling a lot better. From what you all say, port scans are to
be expected, and I can calm down some and do the standard Internet
things that keep the blackHats out.

> Have no password-only SSH accounts but rather demand public-key
> authoriziation.

Already did that, and iptables and SSHd allow only me and my IP in anyway.

> Have a nice day :)

Much better, and thank all of you for your help and advice...

--
Glenn English

Back to linux.debian.user | Previous | Next — Previous in thread | Next in thread | Find similar | Unroll thread

Thread

port scans (OT?) Glenn English <ghe2001@gmail.com> - 2017-12-22 21:40 +0100
  Re: port scans (OT?) Dan Ritter <dsr@randomstring.org> - 2017-12-22 22:00 +0100
  Re: port scans (OT?) Cindy-Sue Causey <butterflybytes@gmail.com> - 2017-12-22 22:00 +0100
  Re: port scans (OT?) "Thomas Schmitt" <scdbackup@gmx.net> - 2017-12-22 22:10 +0100
    Re: port scans (OT?) Richard Hector <richard@walnut.gen.nz> - 2017-12-23 00:20 +0100
      Re: port scans (OT?) "Thomas Schmitt" <scdbackup@gmx.net> - 2017-12-23 08:40 +0100
    Re: port scans (OT?) Glenn English <ghe2001@gmail.com> - 2017-12-23 01:40 +0100
  Re: port scans (OT?) Brian <ad44@cityscape.co.uk> - 2017-12-23 00:00 +0100

csiph-web