On Fri, 10 Jan 1997, Rob Sansom wrote:
>
> RPC Portmapper. Very bad to allow people to connect to this, since they can
> find out what sorts of RPC services you run on your host (if I'm correct).
>
> At 04:34 PM 1/8/97 -0800, you wrote:
> >Can anyone comment on the security of rcp
> >tcp/udp port 111.
> >
That is certainly a true statement, but by blocking access to the
portmap service alone, you are really not preventing anyone from achieving
the same results. It is quite feasible to do a UDP scan for RPC services
and by looking at the resulting RPC replies build up a list that is
identical to what the portmapper will return.
-Dave
--------------------------------+---------------------
David J. Meltzer | Email: davem @
iss .
net
Systems Engineer | Web: www.iss.net
Internet Security Systems, Inc. | Fax: (770)395-1972
References:
|
|
