Idea Man

Maybe I am naive, but I would think it would be a lot easier from a security monitoring stand point to stop have processes like rpc and ftp opening up random ports.  I want to be able to take a baseline of what ports a server is listening on and if there are any new ports opened afterwards then there is a good chance it has been compromised. And it would make the firewall admins a life a lot easier too!