Securing Suse 10.1

[cactus.ed]

Hello,

I'm trying to make my Desktop Suse 10.1 box more secure by turning off all unneeded services. I have turned off all network mail/file/remote daemons I can find, including: Portmap, nfsboot, nfs, sshd and a couple other that have skipped my mind.

There are still a couple items listening that I can't seem to locate:

Active Internet connections (servers and established)
Proto Recv-Q Send-Q Local Address Foreign Address State PID/Program name
tcp 0 0 127.0.0.1:2544 0.0.0.0:* LISTEN 3262/zmd
tcp 0 0 127.0.0.1:631 0.0.0.0:* LISTEN 3625/cupsd
udp 0 0 0.0.0.0:32768 0.0.0.0:* 3156/mdnsd
udp 0 0 0.0.0.0:5353 0.0.0.0:* 3156/mdnsd

or

Active Internet connections (servers and established)
Proto Recv-Q Send-Q Local Address Foreign Address State PID/Program name
tcp 0 0 localhost:novell-zen *:* LISTEN 3262/zmd
tcp 0 0 localhost:ipp *:* LISTEN 3625/cupsd
udp 0 0 *:filenet-tms *:* 3156/mdnsd
udp 0 0 *:mdns *:* 3156/mdnsd

I assume I need "novell-zen" for update alerts, "mdns" probably has something to do with DNS caching and I have restricted CUPS(ipp) to localhost only.

What is filenet-tms?

Thanks for your help,

nate

[bryansmith]

Try this definition:
http://www.linux.ie/old-list/44748.html

Bryan

[bdoggy]

Just curious but what are you trying to secure linux from? Because if your trying to secure it from hackers and whatnot its kindof pointless.. Viruses are also pretty low. But if your looking for a good virus protection look at f-prot. Other then that i wouldnt be worried about anything.