[OPEN-ILS-DEV] Security question

[Robert]

Thanks guys. This server is only running Evergreen and nothing else. I have
added the list of allowed users to /etc/hosts.allow. Thanks for that advice
Bill. I was just going through all the ports and figuring out what all was
not needed so I can turn them off to harden this server. Thanks for the
advice, both Bill and Mike.

On Mon, Jun 2, 2008 at 10:24 AM, Mike Rylander <mrylander at gmail.com> wrote:

>  On Mon, Jun 2, 2008 at 10:16 AM, Robert <glibrarysystem at gmail.com> wrote:
> > Hi all,
> >
> >   I was wondering how important port 111 is to have listening? I know
> that
> > it is linked to portmapper which has some security vulnerabilities and
> was
> > wondering if it was blocked if I could connect to the server or not? Is
> it
> > used to connect the staff client to the server by assigning ports for the
> > connections? I'm assuming that is what it is used for. I would try to
> block
> > it myself but there is a lot of testing going on with our Evergreen
> serrver
> > right now and I don't want to kick everyone off of it.
>
> Evergreen itself doesn't use sunrpc, but you may have other local
> services, such as NFS or yp, that do.
>
> --
> Mike Rylander
>  | VP, Research and Design
>  | Equinox Software, Inc. / The Evergreen Experts
>  | phone: 1-877-OPEN-ILS (673-6457)
>  | email: miker at esilibrary.com
>  | web: http://www.esilibrary.com
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://list.georgialibraries.org/pipermail/open-ils-dev/attachments/20080602/ca6f6037/attachment.html