centos7 关闭 111 端口 systemd rpcbind

最新推荐文章于 2025-04-22 17:00:16 发布

KongJingRou

最新推荐文章于 2025-04-22 17:00:16 发布

阅读量5.2k

点赞数 2

分类专栏： linux

本文链接：https://blog.csdn.net/KongJingRou/article/details/105525790

版权

同事收到一封主机商邮件说

Dear Customer,

Recent network security audits have detected some issues on your
instances. Please review the following reports and help us to ensure
the security of our network:

== Portmapper servers == Portmapper is a service usually used with NFS. When this is not properly firewalled, it can be abused to
conduct DDOS attacks. We recommend that all portmapper services be
behind a firewall, and restricted to only IPs that need to contact
them.

For Linux machines, please add firewall rules to block port 111 on
both UDP and TCP:

iptables -I INPUT 1 -m tcp -p tcp --dport 111 -j DROP iptables -I
INPUT 1 -m udp -p udp --dport 111 -j DROP

Please see https://blog.cloudflare.com/reflections-on-reflections/ for
more information on reflection attacks.

The following IPs have been detected running open portmapper servers:
149.28.224.51:1