[Security] Nearly had heart attack ! :-O

[Conrad Knauer]

Whoops, I e-mailed this instead of replied to the group; darn reply-to
field, grumble, grumble...

CK

---------- Forwarded message ----------

On 3/15/07, Vincent Trouilliez <vincent.trouilliez at modulonet.fr> wrote:

> >Conrad Knauer wrote:

Actually, it was Cameron Hutchison who wrote:

> >If you add a "| grep -v 127.0.0.1" to the end of the above command it
> will remove all the sockets that are listening only on localhost (i.e.
> internal to the box and not seen by the outside world)
>
> Ah, so if we do it manually from the output I pasted above, that means we can
> remove 4 of them from the list.. that's still a lot of stuff remaining, no ?

Indeed; also AFAIK we only have to worry about those entries that have
"LISTEN" mentioned on them.

CK