Thank u Alan :) I've a firewall in that machine with ipchains too, but we're a bit paranoid here X) Let me see apache config files... hummmmmm... ## ## SSL Support ## ## When we also provide SSL we have to listen to the ## standard HTTP port (see above) and to the HTTPS port ## <IfDefine SSL> Listen 80 Listen 443 </IfDefine> This seems really to have anything to see with that... Well now, i can suppouse if i comment that line (Listen 443) the SSL server that's listen at this port will be out, but... it should be a better manner but i cant found were SSL is really *Defined*, should i recompile apache perhaps? Any hint to do the things as right as possible will be very wellcomed. Thanks again, Alan, and the rest of the list :) "Wood, Alan" wrote:

Hi Francisco,

Well, the place to look for https is in your web browser (Apache I guess). Look for key words like secure, SSL and as you could guess - https :-) It will definitely be this that is opening this port. Sorry, but I do not know much about Apache configuration.

If you really can't find the way to turn off the rest, then you could try to use ipchains to block access to them. Not ideal, but I would expect it to do the trick.

Alan

...

I've just installed a SuSE63 in a new machine and i'm trying to leave it just with the essentials services, doing a portscan this is the result:

fmmarzoa@vivaldi:~ > portscan 192.168.66.251 192.168.66.251 22 23 80 113 139 443 514 #

Well, i want port 22 (ssh), 23 (telnet), 80 (http) and 139 (netbios - sorry, it should serve files to windows clients :/) active, and i know how to deactivate them if i need, but i cant find how to put out 113 (auth), 443 (https) and 514 (shell ?).

I've travelled through /etc/inetd.conf and /etc/rc.services trying to find an answer for my question but... may m I turning blind?

-- Francisco M. Marzoa Alonso Nuevo Mundo - Dpto. Informatico ICQ#: 62850923 Henri Dunant, 19 - 28036 Madrid tfno: +34 91 343 18 40 ext. 207 Espana / Spain fax: +34 91 350 28 45

--------------------------------------------------------------------- To unsubscribe, e-mail: suse-security-unsubscribe@suse.com For additional commands, e-mail: suse-security-help@suse.com

-- Francisco M. Marzoa Alonso Nuevo Mundo - Dpto. Informático ICQ#: 62850923 Henri Dunant, 19 - 28036 Madrid tfno: +34 91 343 18 40 ext. 207 España / Spain fax: +34 91 350 28 45