Subject: Re: More security...
From: Graham Leggett (minfrin@sharp.fm)
Date: Wed Aug 15 2001 - 01:30:49 MDT
Brian Watson wrote:
> 1) Is there a way to find out when a user has last been fingered?
>
> 2) Is there a way to turn off fingering for a user, or not have it
> reveal any extensive information?
Many of these sorts of services run from inetd - change the inetd config
to switch them off.
What you need to do is to "harden" your machine. Use a tool like nmap to
scan the open ports on your machine - this will reveal services that are
running that you either don't want or don't need. Then - track each of
these services down and switch them off.
It's a lot more secure to simply not run services you don't need, rather
than trying to hide those services behind firewalls or packet filters.
Regards,
Graham
-- ----------------------------------------- minfrin@sharp.fm "There's a moon over Bourbon Street tonight..."
This archive was generated by hypermail 2a24 : Wed Aug 15 2001 - 02:39:22 MDT