Open Ports problem

AsianSpices · Tux's lil' helper Joined: 30 May 2005 Posts: 82

I did do a stage 3 install

but i need to run tripwire, tftp etc
and thos eare not on the package cd

unless i have the WRONg package cd and not seeing it....

Just to verify...i have the package-x86-2005.iso

can you send me the link for the cd that have the packages for tripwire, net-snmp, tftp please..

Ona nother note...my boss does not want any mail services or telnet running...
so if i did do a emerge -O and not install the dependencies such as the mail services is that going to be a problem?
Will the programs still function?

limn · l33t Joined: 13 May 2005 Posts: 997

overkll · Posted: Thu Jun 02, 2005 9:07 pm Post subject:

christsong84 · Posted: Thu Jun 02, 2005 9:10 pm Post subject:

download from one of the gentoo mirrors...they should have the package file.
_________________
while(true) {self.input(sugar);} :twisted:

AsianSpices · Tux's lil' helper Joined: 30 May 2005 Posts: 82

Frankly this is what I am doing...

I am downloading the whole distfiles from a gentoo mirror
Copying it to a CD and installing the necessary packages from there using

limn · l33t Joined: 13 May 2005 Posts: 997

AsianSpices · Tux's lil' helper Joined: 30 May 2005 Posts: 82

limn · l33t Joined: 13 May 2005 Posts: 997

The footprints of nmap and netstat above do not match. They should, vixie-cron and the rest set aside. The first thing we need to do is figure out why they don't. The simplest answer is that the nmap output is for a different box than the netstat output. That's why I asked for the ifconfig output.

AsianSpices · Tux's lil' helper Joined: 30 May 2005 Posts: 82

Oh
I kneo why it doesnt match......i had to change ip address so that i could get out on the net
It is for the same box
Dont worry about that
thats NOT the problem!!

christsong84 · Posted: Fri Jun 03, 2005 12:15 am Post subject:

I still maintain that it's the firewall that closes ports...just needs proper configuration and having it applied.
_________________
while(true) {self.input(sugar);} :twisted:

limn · l33t Joined: 13 May 2005 Posts: 997

Humor me. Run an ifconfig on your box and compare the HWaddr address in the output to the MAC address listed in the output of nmap. If they are for the same box these should be the same, no matter what IP you assigned. If they are different, it supports the theory that we are talking about two different boxes. And if the MAC addresses are the same, you have a more serious problem than figuring out how to close the ports.

mcspiff · Tux's lil' helper Joined: 24 Oct 2004 Posts: 109

AsianSpices · Tux's lil' helper Joined: 30 May 2005 Posts: 82

christsong84 · Posted: Fri Jun 03, 2005 5:17 pm Post subject:

smux/port 199

http://www.seifried.org/security/ports/0/199.html
_________________
while(true) {self.input(sugar);} :twisted:

AsianSpices · Tux's lil' helper Joined: 30 May 2005 Posts: 82

Yea I figured that much.

But now after re-installing the OS and the services all network less
the snmptrapd daemon cannot be found

Since i am a total newbie to this and this is my 2nd week into gentoo, please bear with me.

But I
emerge net-snmp

and then i did a snmpconf -i and created the scripts
then i started the daemon

/etc/init.d/snmpd restart

in my previous install i could have done
/etc/init.d/snmptrapd restart

Why can i not find it now?
What did i miss?

limn · l33t Joined: 13 May 2005 Posts: 997

Now your nmap output is inconsistent scanning the same IP.

AsianSpices · Tux's lil' helper Joined: 30 May 2005 Posts: 82

limn · l33t Joined: 13 May 2005 Posts: 997

The first nmap shows a MAC address that matches with the ifconfig of the box you are working on and the ports match what you say you want. The second nmap shows only one port open and does not report a MAC address. Two machines using the same IP address could cause this result. That's easy to test.

And if that's the case, you don't have a problem with ports you don't want open, on a box that shows a different port configuration depending on how you look at it, and a Gentoo install doesn't set you up with a mail server just because tripwire and cron need to be able to send mail locally on the box.

The other possible causes are worse, going all the way up to what moocha suspected. For all I know your nmap is compromised, or maybe your network.

AsianSpices · Tux's lil' helper Joined: 30 May 2005 Posts: 82

overkll · Posted: Fri Jun 03, 2005 10:30 pm Post subject:

AsianSpices · Tux's lil' helper Joined: 30 May 2005 Posts: 82

Okie nmap is installing as i type

these things take foreverrrr to install ..

anyway
question
I am tryin to set up a TFTP server
I installed the daemon TFTP-HPA

did a /etc/init.d/in.tftpd start
but teh service does not start

Why?
I dont even know where to start in troubleshooting for this..

here is the /etc/conf.d/in.tftpd file

overkll · Posted: Fri Jun 03, 2005 10:48 pm Post subject:

One thing at a time. Fix a problem, then move on.

AsianSpices · Tux's lil' helper Joined: 30 May 2005 Posts: 82

Well my dear
here is the output from the nmap FROM my Linux box

overkll · Posted: Fri Jun 03, 2005 11:09 pm Post subject:

What was the nmap command you issued? You should include that at the top of the output. Helps us help you.

And what is the output of " netstat -anA inet " and " netstat -anpA inet "

Yes, it is easy for me to say. It is a good standard practice. Install something test and troubleshoot. If all is well move to next program. Otherwise you can complicate things and make it difficult to trace the problem down.

AsianSpices · Tux's lil' helper Joined: 30 May 2005 Posts: 82