Comments and suggestions conceming this page should be mailed to gmourani@videotron.ca Individual Packages Selection The installation program presents a list of the package groups available.select a group to examine Component listed bellow must be unselected from the Menu Group for security:optimization and other reason described bellow. Applications/File: Applications/: finger.fp.fwhois,ncftp.rsh.rsync.talk,telnet Appications/System watch.pind-tils.nfsd-clientsrdate.rdist.scren.ucd- Saeme2aionnenvBase snmp-utils ath.ipchains.vptools System Environment/Daemons: XFree86-xfs,knfsd,Ipr.portmap.routed,rusers.rwho,tftp SgeemefcexmentLubraies rw-font wan to uninstall s ed If those programs are not installed on your new server.he will be compelled to use those f9egrRoalteyycemieen6heygaRnibtsxCiemyeognname,homedrecioy vides the standa d UNIX command-line FTP client.FTP is the fil The fwhois program allows you or your system's users for querying whois databases.[Security risks] The ntalk packag provides client and dae ams for the Internet talk protocol.which allows you to Telnet is a popular protocol for logging into remote systems over the Intemet.[Security risks] Ghostscript is a setof software that provides a PostScript(TM)interpreter.a set ofCprocedures (the es in the PostScript language)and an interpreter h8s8etes8a8genSgst'tacegg1edrendeimgTmeyarenadiontothe 13 Copyright 199 Open Netvork ArchitectureComments and suggestions concerning this page should be mailed to gmourani@videotron.ca © Copyright 1999 Open Network Architecture ® 13 Individual Packages Selection The installation program presents a list of the package groups available, select a group to examine. Component listed bellow must be unselected from the Menu Group for security; optimization and other reason described bellow. Applications/File: git Applications/Internet: finger, ftp, fwhois, ncftp, rsh, rsync, talk, telnet Applications/Publishing: ghostscript, ghostscript-fonts, mpage, rhs-printfilters Applications/System: arpwatch, bind-utils, knfsd-clients, rdate, rdist, screen, ucd￾snmp-utils Documentation indexhtml System Environment/Base: chkfontpath, ipchains, yptools System Environment/Daemons: XFree86-xfs, knfsd, lpr, portmap, routed, rusers, rwho, tftp, ucd-snmp, ypbind System Environment/Libraries: XFree86-libs, libpng User Interface/X: XFree86-75dpi-fonts, urw-fonts Before we explain each description of programs we wan to uninstall, someone can ask why I need to uninstall finger, ftp, fwhois and telnet on the server? First of all we know that those programs by their nature are insecure. Now imagine that cracker have acceded your new server, he can use finger, ftp, fwhois and telnet programs to query or access other node on your network. If those programs are not installed on your new server, he will be compelled to use those programs from the outside or try to install program on your server in which case you can trace it with toll like Tripwire. Finger is a utility, which allows users to see information about system users (login name, home directory, name, how long they've been logged in to the system, etc.). [Security risks] The ftp package provides the standard UNIX command-line FTP client. FTP is the file transfer protocol, which is a widely used Internet protocol for transferring files and for archiving files. [Security risks] The fwhois program allows you or your system's users for querying whois databases. [Security risks] Ncftp is an improved FTP client. Ncftp's improvements include support for command line editing, command histories, recursive gets, automatic anonymous logins and more. [Security risks, unnecessary] The rsh package contains a set of programs, which allow users to run commands on remote machines, login to other machines and copy files between machines (rsh, rlogin and rcp). [Security risks] The ntalk package provides client and daemon programs for the Internet talk protocol, which allows you to chat with other users on different systems. [Security risks] Telnet is a popular protocol for logging into remote systems over the Internet. [Security risks] Ghostscript is a set of software that provides a PostScript(TM) interpreter, a set of C procedures (the Ghostscript library, which implements the graphics capabilities in the PostScript language) and an interpreter for Portable Document Format (PDF) files. [Unnecessary] These fonts can be used by the GhostScript interpreter during text rendering. They are in addition to the shared fonts between GhostScript and X11. [Unnecessary]