topic Re: Security on HP-UX 10.20 in Operating System - HP-UX

Security on HP-UX 10.20

carl airiel — Wed, 28 Dec 2005 01:01:58 GMT

What ports and services can I disable on my system. My system has a 2 oracle db using port 21 and 23. It also uses a rmote shell. What other servies can I disable?I'm also using telnet service when I connect to my system.

Regards,
Allan

Re: Security on HP-UX 10.20

Cem Tugrul — Wed, 28 Dec 2005 01:36:33 GMT

Hi Carl,
Here are some links;
http://forums1.itrc.hp.com/service/forums/questionanswer.do?threadId=151194

http://forums1.itrc.hp.com/service/forums/questionanswer.do?threadId=863686

if i were you i started at looking "/etc/services" file first but try to
take a litle bit care

Good Luck,

Re: Security on HP-UX 10.20

Arunvijai_4 — Wed, 28 Dec 2005 01:37:16 GMT

Hi Allan,

It depends on what all applications you run on 10.20. You can disable all services except telnet (port 23), FTP (port 21), SMTP (port 25), SSH (port 22), rlogin (port 513).

But, MAKE SURE WHAT YOU DO.

-Arun

Re: Security on HP-UX 10.20

Yogeeraj_1 — Wed, 28 Dec 2005 02:09:50 GMT

hi allan,

In /etc/services, you will find most of the ports being used by applications.

Then, you can also go to /sbin/init.d or rc0.d, rc1.d, rc2.d, rc3.d or rc4.d directories under /sbin and check all the services that are running on your system.

You may stop those you don't need by editing the appropriate configuration file in /etc/rc.config.d/

hope this helps too!

kind regards
yogeeraj

Re: Security on HP-UX 10.20

Robert Fritz — Wed, 04 Jan 2006 14:09:48 GMT

Hi Allan,

Though this is for more recent HP-UX versions, this may also help you enumerate the ports beyond what /etc/services would tell you:
http://docs.hp.com/en/5990-7252/

Also, though not supported by HP, here is a commonly-used guide for 11.00 (that is an update to one wrote for HP-UX-10.X:
http://www.windowsecurity.com/whitepaper/Building_a_Bastion_Host_Using_HPUX_11.html

Hope that helps,
-Robert