[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: [cobalt-users] RPC (port 111) attacks on CobaltRaq3



"Zarrir Junior" <zarrir@xxxxxxxxxxxx> wrote:
>    Of all the "visits" Portsentry detects everyday on my server, 90% are
> directed to port 111. I´m pretty sure i have RPC disabled at inetd. Does
the
> bellow boot message confirm this or not?

I don't even need to look at the output.  PortSentry only reports on ports
that are not in use by other services b/c it only attaches to ports not in
use by other services.  So no services are running on port 111.

--
Steve Werby
President, Befriend Internet Services LLC
http://www.befriend.com/