Shulou(Shulou.com)06/02 Report--

Problem description:

During the security scan, it was found that there was a service vulnerability of port 5353 mDNS on the DNS server, but the service could not be found on the system and the port could not be closed.

MDNS introduction:

Port 5353 is a mDNS service, usually a helper that publishes and learns about various services and hosts in a local network without manual network configuration. For example, when a user connects his computer to a local area network, if his machine is running an Avahi service, the Avahi program automatically broadcasts to discover available printers, shared files, and other users who can chat with each other on the network.

Solution:

You can turn it off in a server environment as follows:

# service avahi-daemonstop # stop avahi-daemon service

# chkconfigavahi-daemon off # prevent avahi-daemon from starting up and running again

Welcome to subscribe "Shulou Technology Information " to get latest news, interesting things and hot topics in the IT industry, and controls the hottest and latest Internet news, technology news and IT industry trends.