[H-GEN] Firewall configuration on a remote machine

[Stephen Thorne]

On 2011-02-09, gavin duley wrote:
> Thanks. I figured out that the "unwanted" open ports were nfs related.
> I'm not using nfs, so I uninstalled nfs-common and they no longer seem
> to be open any more.

Common service to have to remove, good job getting rid of it.

> I assume that I want the 'local address' column to be in the form
> 127.0.0.1:portnumber for most things. I think I can just ignore the
> 'foreign address' column here?
> 
> Unless I'm misreading it horribly, I assume lines like this indicate
> that the port is listening only on 127.0.0.1:

You were right on the money. Here's some ipv6 examples:

SSH listening to everyone:
tcp6       0      0 :::22

Print server listening on localhost only:
tcp6       0      0 ::1:631

::1 is localhost for ipv6.

-- 
Regards,
Stephen Thorne
Development Engineer
Netbox Blue