Originally posted by: mohammed.hussain@in.ibm.com

Hello,

Could anyone please let me know how to disable SSL Port 443 in AIX.

In /etc/services file, I found the following lines

https 443/tcp # http protocol over TLS/SSL
https 443/udp # http protocol over TLS/SSL

are these the only lines to be commented, or anything else has to be done.

Thanks.

Originally posted by: Montecarlo

Hi,
/etc/services is just a list of well known ports and and their related services. Entries in /etc/services do not mean that the ports are in use.
netstat -an|grep LISTEN
will list the process ids that are listening on ports.
Regards, Simon

Originally posted by: CRM

If you want to disable port 443 you have two options:

1. Disable the software listening on this port (probably a web server of sorts) or the inetd listener.
2. If you are using AIX above 5.3 TL5 you can use the IP Filters to setup a host firewall and block port 443.

For more information see:

http://publib.boulder.ibm.com/infocenter/pseries/v5r3/index.jsp?topic=/com.ibm.aix.security/doc/security/ipsec_filters_aix.htm

regards

Chris

Originally posted by: MarkTaylor

netstat -an | grep LISTEN will NOT list PIDs (Process IDs), it will only tell you what Ports have a LISTENER.

If you want to see which PIDs have the port open for LISTENING then you can use the rmsock command (native AIX) or lsof (open source)

Rgds
Mark Taylor

Originally posted by: mohammed.hussain@in.ibm.com

Thank you all, it was very helpful.

Originally posted by: ayoub416

Related to AIX 5.3 ... as per article ..comment out in inittab ..

# netstat -Aan |grep 443 |grep LISTEN

f100020000214b98 tcp        0      0  *.443                 *.*                   LISTEN

# rmsock f100020000214b98 tcpcb

The socket 0x214808 is being held by proccess 270498 (java).

ps -ef |grep processid

 

http://www-01.ibm.com/support/docview.wss?uid=isg1IZ47850