unnecessary ports open

[aduaitpokhriyal]

Hi.
I'm using ubuntu-linux ( ubuntu 9.10)
I use utility autoscan network to scan the systems available in local area network of my hostel.
It shows my open TCP ports : like Ssh , Smtp , Http , NetBios-ssn , Microsoft-ds , ipp , Mysql , Postgres.
Are all these services need to run all the time or I can manage the ports.
Don't know much about it just want to know these ports are by default open or I can manage them.

[coopstah13]

if you don't want them to be open, then don't run the service they are associated with

[kurtdriver]

This ought to turn them off. You might consider uninstalling them.

sudo /etc/init.d/servicename stop

Edit: The machine in question is a client of this network?

[ptkobe]

aduaitpokhriyal
lol. manage ports. Are you a manager?

[archayl]

enable ufw..open ports only when needed. Who knows you might need them later.

[jippie]

i think you need to find out why these services are installed on your system in the first place. I don't know about default services on Ubuntu, but I do know you have to manually install openssh-server on Ubuntu if you want to use it. So if port 22/tcp (ssh) is open, it is open because someone installed openssh-server for a reason. If you are sure you don't need it, best thing to do is fully uninstall the package. Same goes for the other services, find out what package install brought them on the system and figure out if you still need that package.

This command may be of some help to you:
sudo netstat -ap | grep --color -Ei '(Ssh|Smtp|Http|NetBios-ssn|Microsoft-ds|ipp|Mysql|Postgres)'
The last commands prints the PID / process name that is connected to the port and with that knowledge you kan look at the manual page eg. 'man master' and/or google around a bit.

Also don't be bothered too much with services that are only listening on IP range 127.*.*.* as they only listen on internal connections coming in. Did you scan your system from the system itself or did you scan it from a remote machine?

You may also consider changing the IP adress these services are listening on. May listen on all IP addresses, but are easily reconfigured just to listen on 127.0.0.1 Check the manual pages for this.

[kurtdriver]

aduaitpokhriyal
lol. manage ports. Are you a manager?

He is now, he is using Linux. Why not welcome the new guy?

[aduaitpokhriyal]

thanks all for advices