TIP: Click on subject to list as thread! ANSI
echo: rberrypi
to: TAUNO VOIPIO
from: FRED SMITH
date: 2018-03-15 08:15:00
subject: Re: rkhunter hidden ports

Tauno Voipio  wrote:

> On 13.3.18 01:40, Roger Bell_West wrote:
> > On 2018-03-12, Fred Smith wrote:
> >>>> Port number: UDP:68 is being used by /sbin/dhcpcd5
> >>>
> >>> Is this machine meant to be a DHCP _server_?
> >>
> >> Definitely not *meant* to be. Where do I configure
> >> that?
> >
> > As another poster pointed out, ths is a client daemon.
> >
> > I generally use dhclient, which doesn't need to keep a port open.
>
>
> DHCP is an extension to BOOTP, and both need to use
> UDP ports 67 and 68.

So am I right to whitelist UDP ports 123 (ntpd), 38243
and 51413 (transmission-daemon), and 68 (dhcpcd5) in
/etc/rkhunter.conf.local?

As I mentioned earlier, I have now disabled rpcbind and
avahi-daemon.  Is there any good reason why those were
enabled by default in raspbian?

thanks

--- SoupGate-Win32 v1.05
* Origin: Agency HUB, Dunedin - New Zealand | FidoUsenet Gateway (3:770/3)

SOURCE: echomail via QWK@docsplace.org

Email questions or comments to sysop@ipingthereforeiam.com
All parts of this website painstakingly hand-crafted in the U.S.A.!
IPTIA BBS/MUD/Terminal/Game Server List, © 2025 IPTIA Consulting™.