blocking a port

[billbose]

Can somebody tell how to block all incoming requests to a port(any port where lsof mentions LISTEN) in Sun Solaris 8 without even touching/restarting the "Listening" service. A scripting solution would be desired in this case.

I tried to put a comment /etc/services file and it didnt work. And installing a firewall like ipfilter is not an option.

- Bill

 

[daFranze]

listen to a port means ether a program is running, which listens to a port or inetd starts an application, which listens to the port, so blocking a port means you disalowe inetd to start the application or do not start the application at all. No Program, no Service.

/etc/services is just a file like /etc/hosts, it contains info about how to translate ports into names, people prefere to say "the smtp port" insted of "the port 25", "disabling" a port in /etc/services means you disable translation, not the service at all.


Best Regards, Franz
--
Solaris System Manager from Munich, Germany
I used to work for Sun Microsystems Support (EMEA) for 5 years

 

[daFranze]

btw look at thread60-411053

Best Regards, Franz
--
Solaris System Manager from Munich, Germany
I used to work for Sun Microsystems Support (EMEA) for 5 years

 

[coffeysm]

Check your /etc/inetd.conf for entries. Also look through your /etc/rc?.d directories since they start up a lot of programs by default SMC, Sendmail, etc... daFranze is also right about the /etc/services thing my experience is doesnt work 99% of the time. The thing is sometimes people disable it in /etc/services but leave it in NIS/NIS+ if they are running it so the service will still run anyway.

 

[billbose]

Thanks for the information, everyone.