open port question
I'm setting up a linux box that is basically living out there on the Internet. It's sitting at a very minimum install right now, and I'm trying to figure out if it's safe to just leave running until I've had more time to study up more on securing it.I just ran netstat -an which returned the following:
Code:
root@us:~# netstat -an Active Internet connections (servers and established) Proto Recv-Q Send-Q Local Address Foreign Address State tcp 0 0 :::22 :::* LISTEN tcp 0 200 ::ffff:<SNIPBOXIP>:22 ::ffff:<SNIPMYIP>:2650 ESTABLISHED Active UNIX domain sockets (servers and established) Proto RefCnt Flags Type State I-Node Path unix 3 [ ] DGRAM 498 /dev/log unix 2 [ ] DGRAM 501 root@us:~#
Is there any harm in leaving the box up like this, only accepting SSH connections?
What about those UNIX domain sockets? I think I read that those can only be accessed locally. Are they safe, or do I need to look into trying to do something to secure them?
Thanks.