Open services in inetd.conf

Open forum for security issues and info.
Forum rules
Any posts concerning pirated software or offering to buy/sell/trade commercial software are subject to removal.
User avatar
AX
Posts: 299
Joined: Wed Apr 27, 2005 9:18 pm
Location: Damascus, Oregon

Open services in inetd.conf

Unread postby AX » Sun Oct 08, 2006 1:28 pm

Hello all,

I am trying to make darn sure my Fuel is secure as my port 80 is open to http calls. I have been reading documentation about inetd.conf but am afraid to shut down some of these services. Do any of you have services in inetd.conf commented out? Below is my current inetd.conf file. I uncomment the bootp and tftpd lines when I am net booting. Any insight is appreciated.

Code: Select all

ftp   stream   tcp   nowait   root   /usr/etc/ftpd   ftpd -l
telnet   stream   tcp   nowait   root   /usr/etc/telnetd   telnetd
shell   stream   tcp   nowait   root   /usr/etc/rshd      rshd -L
login   stream   tcp   nowait   root   /usr/etc/rlogind   rlogind
exec   stream   tcp   nowait   root   /usr/etc/rexecd      rexecd
finger   stream   tcp   nowait   guest   /usr/etc/fingerd   fingerd -L
# http   stream   tcp   nowait   nobody   ?/var/www/server/httpd httpd
# wn-http   stream   tcp   nowait   nobody   ?/var/www/server/wn-httpd -f /var/www/conf/httpd.conf
sgi-dgl stream   tcp   nowait   root/rcv   /usr/etc/dgld   dgld -IM -tDGLTSOCKET
ftp   stream   tcp6   nowait   root   /usr/etc/ftpd   ftpd -l
telnet   stream   tcp6   nowait   root   /usr/etc/telnetd   telnetd
shell   stream   tcp6   nowait   root   /usr/etc/rshd      rshd -L
login   stream   tcp6   nowait   root   /usr/etc/rlogind   rlogind
finger   stream   tcp6   nowait   guest   /usr/etc/fingerd   fingerd -S
#bootp   dgram   udp   wait   root   /usr/etc/bootp      bootp
#bootp   dgram   udp   wait   root   /usr/etc/dhcp_bootp dhcp_bootp -o /etc/config/dhcp_bootp.options
#tftp   dgram   udp   wait   guest   /usr/etc/tftpd   tftpd
ntalk   dgram   udp   wait   root   /usr/etc/talkd      talkd
tftp   dgram   udp6   wait   guest   /usr/etc/tftpd   tftpd
#-s /usr/local/boot /usr/etc/boot
tcpmux   stream   tcp   nowait   root   internal

echo   stream   tcp   nowait   root   internal
discard   stream   tcp   nowait   root   internal
chargen   stream   tcp   nowait   root   internal
daytime   stream   tcp   nowait   root   internal
time   stream   tcp   nowait   root   internal

echo   stream   tcp6   nowait   root   internal
discard   stream   tcp6   nowait   root   internal
chargen   stream   tcp6   nowait   root   internal
daytime   stream   tcp6   nowait   root   internal
time   stream   tcp6   nowait   root   internal

echo   dgram   udp   wait   root   internal
discard   dgram   udp   wait   root   internal
chargen   dgram   udp   wait   root   internal
daytime   dgram   udp   wait   root   internal
time   dgram   udp   wait   root   internal

echo   dgram   udp6   wait   root   internal
discard   dgram   udp6   wait   root   internal
chargen   dgram   udp6   wait   root   internal
daytime   dgram   udp6   wait   root   internal
time   dgram   udp6   wait   root   internal

#uucp   stream   tcp   nowait   root   /usr/lib/uucp/uucpd   uucpd
#
# RPC-based services
# These use the portmapper instead of /etc/services.
#
rstatd/1-3  dgram   rpc/udp wait    root    /usr/etc/rpc.rstatd     rstatd
walld/1     dgram   rpc/udp wait    root    /usr/etc/rpc.rwalld     rwalld
rusersd/1   dgram   rpc/udp wait    root    /usr/etc/rpc.rusersd    rusersd
rquotad/1   dgram   rpc/udp wait    root    /usr/etc/rpc.rquotad    rquotad
sprayd/1    dgram   rpc/udp wait    root    /usr/etc/rpc.sprayd     sprayd
#bootparam/1 dgram   rpc/udp wait    root    /usr/etc/rpc.bootparamd bootparam
#ypupdated and rexd are somewhat insecure, and not really necessary
#ypupdated/1 stream  rpc/tcp wait    root    /usr/etc/rpc.ypupdated  ypupdated
#rexd/1     stream  rpc/tcp wait    root    /usr/etc/rpc.rexd       rexd
sgi_videod/1 stream rpc/tcp wait    root    ?/usr/etc/videod         videod
sgi_fam/1-2 stream  rpc/tcp wait/lc    root    ?/usr/etc/fam          updated
#rexd/1     stream  rpc/tcp wait    root    /usr/etc/rpc.rexd       rexd
sgi_videod/1 stream rpc/tcp wait    root    ?/usr/etc/videod         videod
sgi_fam/1-2 stream  rpc/tcp wait/lc    root    ?/usr/etc/fam          updated
#rexd/1     stream  rpc/tcp wait    root    /usr/etc/rpc.rexd       rexd
sgi_videod/1 stream rpc/tcp wait    root    ?/usr/etc/videod         videod
sgi_fam/1-2 stream  rpc/tcp wait/lc    root    ?/usr/etc/fam            fam
#sgi_toolkitbus/1 stream rpc/tcp wait root/rcv   /usr/etc/rpc.toolkitbus toolkitbusd
sgi_snoopd/1 stream rpc/tcp wait    root    ?/usr/etc/rpc.snoopd     snoopd
sgi_pcsd/1  dgram   rpc/udp wait    root    ?/usr/etc/cvpcsd       pcsd
sgi_pod/1   stream  rpc/tcp wait    root    ?/usr/etc/podd           podd
sgi_xfsmd/1 stream  rpc/tcp wait    root    ?/usr/etc/xfsmd   xfsmd
sgi_espd/1 stream   rpc/tcp wait    root    ?/usr/etc/rpc.espd  espd
sgi-esphttp stream  tcp wait        root    /usr/etc/esphttpd   esphttpd -u300

# ToolTalk Database Server
ttdbserverd/1   stream  rpc/tcp wait root ?/usr/etc/rpc.ttdbserverd rpc.ttdbserverd
#
# TCPMUX based services
#
# Impressario network scanning support
tcpmux/sgi_scanner stream tcp nowait root   ?/usr/lib/scan/net/scannerd scannerd
# Printer daemon for passing client requests to lpsched
tcpmux/sgi_printer stream tcp nowait root   ?/usr/lib/print/printerd printerd
# System administration server
tcpmux/sgi_sysadm stream tcp nowait root   ?/usr/sysadm/bin/sysadmd sysadmd
#SGI DMF Distributed Command Feature dmusrcmd service
tcpmux/sgi_dmusrcmd stream tcp nowait root ?/usr/etc/dmusrcmd /usr/etc/dmusrcmd
[/code]

User avatar
foetz
Moderator
Moderator
Posts: 6543
Joined: Mon Apr 14, 2003 4:34 am
Contact:

Unread postby foetz » Sun Oct 08, 2006 2:57 pm

posted mine smoe time ago (you know, the search ...).
also if you wanna lock down your fuel have a look at ipfilterd or ipfilter.


Return to “SGI: Security”

Who is online

Users browsing this forum: No registered users and 1 guest