Skip site navigation (1)Skip section navigation (2)
Date:      Wed, 22 Mar 2006 10:58:56 +0100
From:      Erik Norgaard <norgaard@locolomo.org>
To:        Miguel <mmiranda@123.com.sv>
Cc:        Halid Faith <maslak@ihlas.net.tr>, freebsd-questions@freebsd.org
Subject:   Re: What does udp port 514 use?
Message-ID:  <44211FE0.5000908@locolomo.org>
In-Reply-To: <4420585F.1000006@123.com.sv>
References:  <000d01c64d1d$95d2ac40$dc96eed5@ihlasnetym> <4420585F.1000006@123.com.sv>

next in thread | previous in thread | raw e-mail | index | archive | help
Miguel wrote:
> Halid Faith wrote:
> 
>> 2 - When I type netstat -na  I see that udp port 514 is open as below
>> udp4       0      0  *.514                  *.*
>> udp6       0      0  *.514                  *.*
>>
>> Should I close this port ? then How can I close this port?
>>  
> that is the syslog port for remote hosts' events , you can disable it 
> adding this to your rc.conf
> 
> syslog_flags="-ss"

The default setting is "-s" which means that syslog will not log events 
from foreign hosts. -ss means it wont listen at all on that port.

There are few reasons to have syslog listening on that port:

There might be some services running on you host (not that I know any) 
that try to write to the loopback interface rather than a UNIX socket. 
In that case you can force syslog only to bind to the loopback interface 
adding "-b localhost".

Also, you should have your local firewall block incoming traffic.

Cheers, Erik

-- 
Ph: +34.666334818                                  web: www.locolomo.org
S/MIME Certificate: www.daemonsecurity.com/ca/8D03551FFCE04F06.crt
Subject ID:  9E:AA:18:E6:94:7A:91:44:0A:E4:DD:87:73:7F:4E:82:E7:08:9C:72
Fingerprint: 5B:D5:1E:3E:47:E7:EC:1C:4C:C8:3A:19:CC:AE:14:F5:DF:18:0F:B9



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?44211FE0.5000908>