Article ID: 6573, created on Aug 5, 2009, last review on May 11, 2014

  • Applies to:
  • H-Sphere

Symptoms

Parallels H-Sphere Control Panel can not pass PCI (payment card industry) scan because off the following security information found on  port/service "sunrpc (111/tcp)":
"RPC portmapper"

Resolution

Filter incoming traffic to TCP port 111 if desired.

# netstat -anp|grep 111
tcp        0      0 0.0.0.0:111                 0.0.0.0:* LISTEN      1597/portmap
udp        0      0 0.0.0.0:111                 0.0.0.0:*         1597/portmap

The portmapper manages RPC connections, which are used by protocols such as NFS and NIS.

Disable the service if NFS/NIS not used. In other case, filter out all not needed requests.

To disable the service, run:
# service portmap stop
# chkconfig portmap off
# chkconfig --del portmap

f213b9fa8759d57bee5d547445806fe7 6311ae17c1ee52b36e68aaf4ad066387

Email subscription for changes to this article
Save as PDF