Aren
/
NetBSD
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity
NetBSD/etc/inetd.conf

80 lines
3.2 KiB
Plaintext
Raw Normal View History

Add (commented out) hprop service, along with a short explanation of when to enable it and why.
2000-08-07 00:35:13 +04:00
# $NetBSD: inetd.conf,v 1.38 2000/08/06 20:35:13 thorpej Exp $
initial import of 386bsd-0.1 sources
1993-03-21 12:45:37 +03:00
#
# Internet server configuration database
#
cleanup Lite-1 merge
1997-02-15 13:02:07 +03:00
# @(#)inetd.conf 8.2 (Berkeley) 3/18/94
initial import of 386bsd-0.1 sources
1993-03-21 12:45:37 +03:00
#
Comment out telnet, ftp since they use cleartext passwords (discussed recently on tech-net, no objection raised except that it doesn't go far enough..) Fix misc/10219 as suggested in PR: add -L to rlogind and -l to tftpd command lines to enable logging.
2000-06-06 16:04:02 +04:00
#ftp stream tcp nowait root /usr/libexec/ftpd ftpd -ll
#telnet stream tcp nowait root /usr/libexec/telnetd telnetd
Disable everything except ftpd and telnetd by default.
1999-11-05 14:16:20 +03:00
#shell stream tcp nowait root /usr/libexec/rshd rshd -L
Comment out telnet, ftp since they use cleartext passwords (discussed recently on tech-net, no objection raised except that it doesn't go far enough..) Fix misc/10219 as suggested in PR: add -L to rlogind and -l to tftpd command lines to enable logging.
2000-06-06 16:04:02 +04:00
#login stream tcp nowait root /usr/libexec/rlogind rlogind -L
it is clear that mountd started from inetd does not work
1993-09-01 13:43:09 +04:00
#exec stream tcp nowait root /usr/libexec/rexecd rexecd
#uucpd stream tcp nowait root /usr/libexec/uucpd uucpd
#nntp stream tcp nowait usenet /usr/libexec/nntpd nntpd
Disable everything except ftpd and telnetd by default.
1999-11-05 14:16:20 +03:00
#finger stream tcp nowait nobody /usr/libexec/fingerd fingerd
Use a colon to seprate user and group name pairs.
1999-10-07 01:55:54 +04:00
#ident stream tcp nowait nobody:kmem /usr/libexec/identd identd -l -o -e -N
Comment out telnet, ftp since they use cleartext passwords (discussed recently on tech-net, no objection raised except that it doesn't go far enough..) Fix misc/10219 as suggested in PR: add -L to rlogind and -l to tftpd command lines to enable logging.
2000-06-06 16:04:02 +04:00
#tftp dgram udp wait root /usr/libexec/tftpd tftpd -l -s /tftpboot
Disable everything except ftpd and telnetd by default.
1999-11-05 14:16:20 +03:00
#comsat dgram udp wait root /usr/libexec/comsat comsat
#ntalk dgram udp wait nobody:tty /usr/libexec/ntalkd ntalkd
bootpd can run from the shell, too, and thus lives in /usr/sbin, not /usr/libexec.
1995-09-13 21:47:55 +04:00
#bootps dgram udp wait root /usr/sbin/bootpd bootpd
make these changes to the default user.group: - internal services run as `nobody' - rpc.rusersd and rpc.sprayd run as `nobody' - rpc.rstatd run as `nobody.kmem' - rpc.rwalld run as `nobody.tty'
1997-10-07 16:45:32 +04:00
#
# Games
#
add hunt(6) entry (commented by default)
1997-10-04 13:16:00 +04:00
#hunt dgram udp wait nobody /usr/games/huntd huntd
make these changes to the default user.group: - internal services run as `nobody' - rpc.rusersd and rpc.sprayd run as `nobody' - rpc.rstatd run as `nobody.kmem' - rpc.rwalld run as `nobody.tty'
1997-10-07 16:45:32 +04:00
#
# Internal services
#
cleanup Lite-1 merge
1997-02-15 13:02:07 +03:00
#tcpmux stream tcp nowait root internal
make these changes to the default user.group: - internal services run as `nobody' - rpc.rusersd and rpc.sprayd run as `nobody' - rpc.rstatd run as `nobody.kmem' - rpc.rwalld run as `nobody.tty'
1997-10-07 16:45:32 +04:00
#echo stream tcp nowait nobody internal
#discard stream tcp nowait nobody internal
#chargen stream tcp nowait nobody internal
Disable everything except ftpd and telnetd by default.
1999-11-05 14:16:20 +03:00
#daytime stream tcp nowait nobody internal
#time stream tcp nowait nobody internal
make these changes to the default user.group: - internal services run as `nobody' - rpc.rusersd and rpc.sprayd run as `nobody' - rpc.rstatd run as `nobody.kmem' - rpc.rwalld run as `nobody.tty'
1997-10-07 16:45:32 +04:00
#echo dgram udp wait nobody internal
#discard dgram udp wait nobody internal
#chargen dgram udp wait nobody internal
#daytime dgram udp wait nobody internal
#time dgram udp wait nobody internal
cleanup Lite-1 merge
1997-02-15 13:02:07 +03:00
#qotd stream tcp nowait nobody /usr/games/fortune fortune
make these changes to the default user.group: - internal services run as `nobody' - rpc.rusersd and rpc.sprayd run as `nobody' - rpc.rstatd run as `nobody.kmem' - rpc.rwalld run as `nobody.tty'
1997-10-07 16:45:32 +04:00
#
# Kerberos authenticated services
#
disable kerberos version of rsh/rlogin, because things don't work properly if they're enabled and the programs don't support kerberos (by default, the NetBSD programs don't.)
1994-12-23 18:12:39 +03:00
#klogin stream tcp nowait root /usr/libexec/rlogind rlogind -k
#eklogin stream tcp nowait root /usr/libexec/rlogind rlogind -k -x
#kshell stream tcp nowait root /usr/libexec/rshd rshd -k
make these changes to the default user.group: - internal services run as `nobody' - rpc.rusersd and rpc.sprayd run as `nobody' - rpc.rstatd run as `nobody.kmem' - rpc.rwalld run as `nobody.tty'
1997-10-07 16:45:32 +04:00
#
# Services run ONLY on the Kerberos server
#
Remove the (not supported) krbupdate service, and add (commented out) kerberos-adm.
2000-08-05 04:48:15 +04:00
#kerberos-adm stream tcp nowait root /usr/libexec/kadmind kadmind
initial import of 386bsd-0.1 sources
1993-03-21 12:45:37 +03:00
#kpasswd stream tcp nowait root /usr/libexec/kpasswdd kpasswdd
make these changes to the default user.group: - internal services run as `nobody' - rpc.rusersd and rpc.sprayd run as `nobody' - rpc.rstatd run as `nobody.kmem' - rpc.rwalld run as `nobody.tty'
1997-10-07 16:45:32 +04:00
#
Add (commented out) hprop service, along with a short explanation of when to enable it and why.
2000-08-07 00:35:13 +04:00
# The hprop service is run on slave KDCs to receive the database from
# the master KDC.
#hprop stream tcp nowait root /usr/libexec/hpropd hpropd
#
make these changes to the default user.group: - internal services run as `nobody' - rpc.rusersd and rpc.sprayd run as `nobody' - rpc.rstatd run as `nobody.kmem' - rpc.rwalld run as `nobody.tty'
1997-10-07 16:45:32 +04:00
# RPC based services
#
Allow a higher count of started services for broadcast RPC services. Since rpcbind version 3 and 4 clients will try broadcasts using both the old and new protocol for IPv4, the double amount of packets may come in, causing bogus "service looping" events in inetd.
2000-06-22 15:35:13 +04:00
#rstatd/1-3 dgram rpc/udp wait:100 nobody:kmem /usr/libexec/rpc.rstatd rpc.rstatd
#rusersd/2-3 dgram rpc/udp wait:100 nobody /usr/libexec/rpc.rusersd rpc.rusersd
Disable everything except ftpd and telnetd by default.
1999-11-05 14:16:20 +03:00
#walld/1 dgram rpc/udp wait nobody:tty /usr/libexec/rpc.rwalld rpc.rwalld
make these changes to the default user.group: - internal services run as `nobody' - rpc.rusersd and rpc.sprayd run as `nobody' - rpc.rstatd run as `nobody.kmem' - rpc.rwalld run as `nobody.tty'
1997-10-07 16:45:32 +04:00
#sprayd/1 dgram rpc/udp wait nobody /usr/libexec/rpc.sprayd rpc.sprayd
sprayd & rquotad: disabled by default
1994-06-24 11:46:19 +04:00
#rquotad/1 dgram rpc/udp wait root /usr/libexec/rpc.rquotad rpc.rquotad
provide sample lines for IPv6 services (at this moment ftpd and fingerd)
1999-07-02 10:05:21 +04:00
#
# IPv6 services.
# The only difference with the above is "tcp6" instead of "tcp".
add comment about IPv4/v6 dual stack support (enable both tcp and tcp6).
1999-12-20 15:43:17 +03:00
# Be sure to enable both "tcp" and "tcp6" when you need service for
# both IPv4/v6. Consult inetd(8) for details.
provide sample lines for IPv6 services (at this moment ftpd and fingerd)
1999-07-02 10:05:21 +04:00
#
Comment out telnet, ftp since they use cleartext passwords (discussed recently on tech-net, no objection raised except that it doesn't go far enough..) Fix misc/10219 as suggested in PR: add -L to rlogind and -l to tftpd command lines to enable logging.
2000-06-06 16:04:02 +04:00
#ftp stream tcp6 nowait root /usr/libexec/ftpd ftpd -ll
#telnet stream tcp6 nowait root /usr/libexec/telnetd telnetd
add tcp6 lines for rshd/rlogind.
2000-02-09 14:05:04 +03:00
#shell stream tcp6 nowait root /usr/libexec/rshd rshd -L
Comment out telnet, ftp since they use cleartext passwords (discussed recently on tech-net, no objection raised except that it doesn't go far enough..) Fix misc/10219 as suggested in PR: add -L to rlogind and -l to tftpd command lines to enable logging.
2000-06-06 16:04:02 +04:00
#login stream tcp6 nowait root /usr/libexec/rlogind rlogind -L
GENERIC kernel does not ship with IPv6, so comment out tcp6/udp6 entries.
1999-10-05 14:44:28 +04:00
#finger stream tcp6 nowait nobody /usr/libexec/fingerd fingerd
Comment out telnet, ftp since they use cleartext passwords (discussed recently on tech-net, no objection raised except that it doesn't go far enough..) Fix misc/10219 as suggested in PR: add -L to rlogind and -l to tftpd command lines to enable logging.
2000-06-06 16:04:02 +04:00
#tftp dgram udp6 wait root /usr/libexec/tftpd tftpd -l -s /tftpboot
* Portmap is now called rpcbind. * Add IPv6 RPC entries to inetd.conf (commented out by default, as the others) * Add netconfig file, needed for TI-RPC code.
2000-06-03 02:54:08 +04:00
#
# IPv6 RPC services.
#
Allow a higher count of started services for broadcast RPC services. Since rpcbind version 3 and 4 clients will try broadcasts using both the old and new protocol for IPv4, the double amount of packets may come in, causing bogus "service looping" events in inetd.
2000-06-22 15:35:13 +04:00
#rstatd/1-3 dgram rpc/udp6 wait:100 root /usr/libexec/rpc.rstatd rpc.rstatd
#rusersd/2-3 dgram rpc/udp6 wait:100 root /usr/libexec/rpc.rusersd rpc.rusersd