[linux] skenovanie portov - otazka

[Jaroslav Jelinek]

Peter Longa wrote:
> 
> Zdravim!
> 
>     Neviem o  unixe (mam freebsd) vela, ale nasiel som v hlaskach apach
> servera znamky skenovania ip 211.53.208.209, ale az na vsetky dotazy apach
> odpovedal: "script not found or unable to stat:
> /usr/local/share/apache/cgi-bin/..... ", na jednom napisal: "file
> permissions deny server execution: /usr/local/share/apache/cgi-bin/test-cgi"
> .

Minimalne zmen defaultny nazov cgi-bin adresara a cgi-ciek, ak nejake
pouzivas.

> Chcel by som sa opytat, kde sa zakazuju porty ( v akom subore) a ci je dobre

Filtrovanie portov vo FreeBSD s robi pomocou IP filter. Najnocsiu verziu
najdes na Najdes ho na http://coombs.anu.edu.au/~avalon/

> ak v subory inetd.conf mam povolene len tieto veci:
> 
>     ftp stream tcp nowait root /usr/libexec/ftpd ftpd -l
>     shell stream tcp nowait root /usr/libexec/rshd rshd
>     login stream tcp nowait root /usr/libexec/rlogind rlogind

remote shell (rshd) a rlogin odporucam vyhodit, a ak nepouzivas ftp tak
aj ftpd. 

Jaro
-- 
+------------------------------------------------------------------+
| URI: http://24.sk/ | email: jelinek na 24.sk | GSM: -421-903-625016 |
+------------------------------------------------------------------+