Re: security questions

[Carl <carl@cybermall2000.com>]

I had the same concerns, and likewise I couldn't figure out how
to turn off the server at port 7786.  My solution is to firewall
off the port 7786.  This was using redhat 5.2 so I used ipfwadm.
Since redhat 6 is using the new 2.2 kernel its now ipchains
instead of ipfwadm.  I just tried this on a RH6 box and it seems 
to work

ipchains -A input -d 1.2.3.4/32 7786 -p tcp -j DENY

Just replace the 1.2.3.4 with your IP address and you should be 
set.  If you want this to run every time you reboot, just add
this line at the end of /etc/rc.d/rc.local

Carl


Kyle Hayes wrote:
> 
> ******    message to minivend-users from Kyle Hayes <kyle540@quicknet.net>     ******
> 
> I am trying to figure out how to turn off the admin pages and the web
> server listening on port 7786.  I really want to turn off that port!
> 
> I have been looking through the docs, and I can see how to remap the port,
> but TcpMap and TcpHost do not seem like what I want.  I really want to
> disable the internal web server completely.  I am running in UNIX socket
> mode, but I can't get rid of this port.  I have several security programs
> running on my machine and that port being open is drawing scans.  For
> similar reasons, I want to totally remove the admin pages.  I admin
> minivend purely from the command line.
> 
> How do I do this?
> 
> MV 3.12, Red Hat Linux 6.0.
> 
> Thanks in advance.
> 
> Best,
> Kyle
> 
> -
> To unsubscribe from the list, DO NOT REPLY to this message.  Instead, send
> email with 'UNSUBSCRIBE minivend-users' in the body to Majordomo@minivend.com.
> Archive of past messages: http://www.minivend.com/minivend/minivend-list