Looks like a typical debian installation, or a 5 year old copy of redhat/slackware, the only thing missing is systat and netstat =) either way, you should disable/remove portmap, edit /etc/inetd.conf and disable discard, daytime, time, probably smtp, disable/remove lpd (do you have a printer attached?), rpc.statd and most likely famd as well, unless you meant to run a local dns server. if you have no specific need for a local dns server, i'd disable it and use your ISP's. 32768 happens to be the first port linux uses upon an application asking for a socket, it's either inetd itself, or smtp. You'd think debian would get a clue and stop enabling this crap by default, redhat and slackware learned years ago. > portmap 207 daemon 4u IPv4 191 TCP *:sunrpc (LISTEN) > inetd 325 root 4u IPv4 379 TCP *:discard (LISTEN) > inetd 325 root 6u IPv4 381 TCP *:daytime (LISTEN) > inetd 325 root 7u IPv4 382 TCP *:time (LISTEN) > inetd 325 root 10u IPv4 385 TCP *:smtp (LISTEN) > inetd 325 root 11u IPv4 386 TCP *:auth (LISTEN) > inetd 325 root 12u IPv4 387 TCP *:32768 (LISTEN) > lpd 332 root 6u IPv4 459 TCP *:printer (LISTEN) > sshd 339 root 3u IPv4 471 TCP *:ssh (LISTEN) > rpc.statd 450 root 6u IPv4 609 TCP *:632 (LISTEN) > famd 533 nick 0u IPv4 387 TCP *:32768 (LISTEN) > famd 533 nick 1u IPv4 387 TCP *:32768 (LISTEN) > famd 533 nick 2u IPv4 387 TCP *:32768 (LISTEN > > doing some googling around, it seems famd is doing some DNS stuff, > rpc.statd is monitoring network status, and inetd is providing a bunch > of services i don't really need -- please correct me if i'm wrong! -- Matthew S. Hallacy FUBAR, LART, BOFH Certified http://www.poptix.net GPG public key 0x01938203 _______________________________________________ TCLUG Mailing List - Minneapolis/St. Paul, Minnesota http://www.mn-linux.org tclug-list at mn-linux.org https://mailman.real-time.com/mailman/listinfo/tclug-list