The last time I installed Debian Etch i closed both port 111 and 113 but since I’ve forgot it already and a new installation is in progress, this post should remind me how to do it in the future. The code view below shows the ports nmap found were in a open state

PORT    STATE SERVICE
111/tcp open  rpcbind
113/tcp open  auth

Port 113/auth can be closed by commenting out the ident line in the /etc/inetd.conf

#ident          stream  tcp     wait    identd  /usr/sbin/identd        identd

Port 111 is the portmap daemon and can be configured to only listen on the loopback interface

dpkg-reconfigure portmap

This command modifies the /etc/default/portmap file and adds/uncomments the line

OPTIONS="-i 127.0.0.1"