由 holicy » 週二 12月 30, 2003 12:34 am
> telnet (my ip) 22
Trying (my ip)...
Connected to (my ip).
Escape character is '^]'.
SSH-2.0-OpenSSH_3.4p1 Debian 1:3.4p1-1.woody.3
Protocol mismatch.
> netstat -apeen
Active Internet connections (servers and established)
Proto Recv-Q Send-Q Local Address Foreign Address State User Inode PID/Program name
tcp 0 0 0.0.0.0:37 0.0.0.0:* LISTEN 0 229 166/inetd
tcp 0 0 0.0.0.0:9 0.0.0.0:* LISTEN 0 226 166/inetd
tcp 0 0 0.0.0.0:13 0.0.0.0:* LISTEN 0 228 166/inetd
tcp 0 0 0.0.0.0:22 0.0.0.0:* LISTEN 0 612 301/sshd
tcp 0 0 0.0.0.0:25 0.0.0.0:* LISTEN 0 230 166/inetd
udp 0 0 0.0.0.0:9 0.0.0.0:* 0 227 166/inetd
udp 0 0 0.0.0.0:68 0.0.0.0:* 0 95 103/dhclient-2.2.x
Active UNIX domain sockets (servers and established)
Proto RefCnt Flags Type State I-Node PID/Program name Path
unix 3 [ ] DGRAM 174 156/syslogd /dev/log
unix 2 [ ] DGRAM 215 159/klogd
> iptables -L
Chain INPUT (policy ACCEPT)
target prot opt source destination
Chain FORWARD (policy ACCEPT)
target prot opt source destination
Chain OUTPUT (policy ACCEPT)
target prot opt source destination
看起來是沒有任何設定
> less hosts.allow
# /etc/hosts.allow: list of hosts that are allowed to access the system.
# See the manual pages hosts_access(5), hosts_options(5)
# and /usr/doc/netbase/portmapper.txt.gz
#
# Example: ALL: LOCAL @some_netgroup
# ALL: .foobar.edu EXCEPT terminalserver.foobar.edu
#
# If you're going to protect the portmapper use the name "portmap" for the
# daemon name. Remember that you can only use the keyword "ALL" and IP
# addresses (NOT host or domain names) for the portmapper. See portmap[8]
# and /usr/doc/portmap/portmapper.txt.gz for further information.
看起來是沒有任何設定
> less hosts.deny
# /etc/hosts.deny: list of hosts that are _not_ allowed to access the system.
# See the manual pages hosts_access(5), hosts_options(5)
# and /usr/doc/netbase/portmapper.txt.gz
#
# Example: ALL: some.host.name, .some.domain
# ALL EXCEPT in.fingerd: other.host.name, .other.domain
#
# If you're going to protect the portmapper use the name "portmap" for the
# daemon name. Remember that you can only use the keyword "ALL" and IP
# addresses (NOT host or domain names) for the portmapper. See portmap[8]
# and /usr/doc/portmap/portmapper.txt.gz for further information.
#
# The PARANOID wildcard matches any host whose name does not match its
# address. You may wish to enable this to ensure any programs that don't
# validate looked up hostnames still leave understandable logs. In past
# versions of Debian this has been the default.
# ALL: PARANOID
看起來是沒有任何設定