SYSTEMD: Desativar a listagem da porta 111

Caso seu servidor esteja configurado para receber conexões na porta 111 e você deseje realizar o bloqueio, siga os procedimentos abaixo:

PASSO 1: VERIFIQUE AS CONEXÕES ABERTAS

[root@cpanel04 ~]# ss -tpna|grep 111
LISTEN     0      128          *:111                      *:*                   users:(("systemd",pid=1,fd=42))
TIME-WAIT  0      0      108.61.34.205:587                198.27.111.51:35903
TIME-WAIT  0      0      108.61.34.205:587                198.27.111.50:58590
TIME-WAIT  0      0      108.61.34.205:587                198.27.111.50:38768
TIME-WAIT  0      0      108.61.34.205:587                198.27.111.51:54470
TIME-WAIT  0      0      108.61.34.205:587                198.27.111.50:34615
TIME-WAIT  0      0      108.61.34.205:587                198.27.111.50:37320
TIME-WAIT  0      0      108.61.34.205:587                198.27.111.48:43868
TIME-WAIT  0      0      108.61.34.205:587                198.27.111.51:59980
ESTAB      0      0      108.61.34.205:587                198.27.111.51:36747               users:(("exim",pid=15375,fd=10),("exim",pid=15375,fd=9))
TIME-WAIT  0      0      108.61.34.205:587                198.27.111.48:42414
TIME-WAIT  0      0      108.61.34.205:587                198.27.111.49:53161
LISTEN     0      128         :::111                     :::*                   users:(("systemd",pid=1,fd=41))

PASSO 2: DESATIVE O SERVIÇO RPCBIND

# systemctl stop rpcbind

# systemctl disable rpcbind

# systemctl mask rpcbind

# systemctl stop rpcbind.socket

# systemctl disable rpcbind.socket

# systemctl status rpcbind

PASSO 3: VISUALISE O NOVO STATUS DAS CONEXÕES

[root@cpanel04 ~]# ss -tpna|grep 111

Ainda em dúvida relacionado a algum procedimento?

Não se preocupe, abra um ticket e nossa equipe irá lhe auxiliar.