disabling finger etc.

[DrTebi]

Hello,
I am trying to disable "finger" and other things like "tcp-small-servers". What am I doing wrong?

after I connect to the router and enter the password, I go..
>config terminal
>no ip finger
>no service tcp-small-servers

and so on. When I do a show run, no ip finger shows up, tcp-small-servers not. However, I can do a finger to my machine.

I am using a cisco 1720, OS version 12.1

Thanks

 

[marsd]

reload

 

[Bluecrack]

On the same router 1720 (IOS 12.1 and 12.2), from a security standpoint, what other services are loaded by default that should be turned off or ACLed?

So far I have turned off the following:
- finger

I also have the following setup with ACLs restricting the IPs that can access these services:
- HTTP
- SNMP

What else should be taken care of? Particularly UDP based stuff that's a little harder to portscan.

 

[marsd]

no service udp small servers
This includes:
echo (7), chargen (19) and discard (9),
all outdated and good for nothing but DOS attacks.

HTH.
M