Aren/NetBSD
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity
c5da7a4cfa
NetBSD/etc/inetd.conf

84 lines
3.6 KiB
Plaintext
Raw Normal View History

kpasswd is a "wait" type service.
2001-03-26 02:33:15 +04:00
# $NetBSD: inetd.conf,v 1.42 2001/03/25 22:33:15 thorpej Exp $
initial import of 386bsd-0.1 sources
1993-03-21 12:45:37 +03:00
#
# Internet server configuration database
#
cleanup Lite-1 merge
1997-02-15 13:02:07 +03:00
# @(#)inetd.conf 8.2 (Berkeley) 3/18/94
initial import of 386bsd-0.1 sources
1993-03-21 12:45:37 +03:00
#
Comment out telnet, ftp since they use cleartext passwords (discussed recently on tech-net, no objection raised except that it doesn't go far enough..) Fix misc/10219 as suggested in PR: add -L to rlogind and -l to tftpd command lines to enable logging.
2000-06-06 16:04:02 +04:00
#ftp stream tcp nowait root /usr/libexec/ftpd ftpd -ll
move tcp6/udp6 entries upwards so that they do not get out of sync with IPv4 services. add kerberos-adm and internal services (like echo) on tcp/udp6.
2000-12-31 09:06:50 +03:00
#ftp stream tcp6 nowait root /usr/libexec/ftpd ftpd -ll
Comment out telnet, ftp since they use cleartext passwords (discussed recently on tech-net, no objection raised except that it doesn't go far enough..) Fix misc/10219 as suggested in PR: add -L to rlogind and -l to tftpd command lines to enable logging.
2000-06-06 16:04:02 +04:00
#telnet stream tcp nowait root /usr/libexec/telnetd telnetd
move tcp6/udp6 entries upwards so that they do not get out of sync with IPv4 services. add kerberos-adm and internal services (like echo) on tcp/udp6.
2000-12-31 09:06:50 +03:00
#telnet stream tcp6 nowait root /usr/libexec/telnetd telnetd
Disable everything except ftpd and telnetd by default.
1999-11-05 14:16:20 +03:00
#shell stream tcp nowait root /usr/libexec/rshd rshd -L
move tcp6/udp6 entries upwards so that they do not get out of sync with IPv4 services. add kerberos-adm and internal services (like echo) on tcp/udp6.
2000-12-31 09:06:50 +03:00
#shell stream tcp6 nowait root /usr/libexec/rshd rshd -L
Comment out telnet, ftp since they use cleartext passwords (discussed recently on tech-net, no objection raised except that it doesn't go far enough..) Fix misc/10219 as suggested in PR: add -L to rlogind and -l to tftpd command lines to enable logging.
2000-06-06 16:04:02 +04:00
#login stream tcp nowait root /usr/libexec/rlogind rlogind -L
move tcp6/udp6 entries upwards so that they do not get out of sync with IPv4 services. add kerberos-adm and internal services (like echo) on tcp/udp6.
2000-12-31 09:06:50 +03:00
#login stream tcp6 nowait root /usr/libexec/rlogind rlogind -L
it is clear that mountd started from inetd does not work
1993-09-01 13:43:09 +04:00
#exec stream tcp nowait root /usr/libexec/rexecd rexecd
#uucpd stream tcp nowait root /usr/libexec/uucpd uucpd
#nntp stream tcp nowait usenet /usr/libexec/nntpd nntpd
Disable everything except ftpd and telnetd by default.
1999-11-05 14:16:20 +03:00
#finger stream tcp nowait nobody /usr/libexec/fingerd fingerd
move tcp6/udp6 entries upwards so that they do not get out of sync with IPv4 services. add kerberos-adm and internal services (like echo) on tcp/udp6.
2000-12-31 09:06:50 +03:00
#finger stream tcp6 nowait nobody /usr/libexec/fingerd fingerd
Use a colon to seprate user and group name pairs.
1999-10-07 01:55:54 +04:00
#ident stream tcp nowait nobody:kmem /usr/libexec/identd identd -l -o -e -N
Comment out telnet, ftp since they use cleartext passwords (discussed recently on tech-net, no objection raised except that it doesn't go far enough..) Fix misc/10219 as suggested in PR: add -L to rlogind and -l to tftpd command lines to enable logging.
2000-06-06 16:04:02 +04:00
#tftp dgram udp wait root /usr/libexec/tftpd tftpd -l -s /tftpboot
move tcp6/udp6 entries upwards so that they do not get out of sync with IPv4 services. add kerberos-adm and internal services (like echo) on tcp/udp6.
2000-12-31 09:06:50 +03:00
#tftp dgram udp6 wait root /usr/libexec/tftpd tftpd -l -s /tftpboot
Disable everything except ftpd and telnetd by default.
1999-11-05 14:16:20 +03:00
#comsat dgram udp wait root /usr/libexec/comsat comsat
comsat is ipv6 ready
2001-03-08 04:27:24 +03:00
#comsat dgram udp6 wait root /usr/libexec/comsat comsat
Disable everything except ftpd and telnetd by default.
1999-11-05 14:16:20 +03:00
#ntalk dgram udp wait nobody:tty /usr/libexec/ntalkd ntalkd
bootpd can run from the shell, too, and thus lives in /usr/sbin, not /usr/libexec.
1995-09-13 21:47:55 +04:00
#bootps dgram udp wait root /usr/sbin/bootpd bootpd
make these changes to the default user.group: - internal services run as `nobody' - rpc.rusersd and rpc.sprayd run as `nobody' - rpc.rstatd run as `nobody.kmem' - rpc.rwalld run as `nobody.tty'
1997-10-07 16:45:32 +04:00
#
# Games
#
add hunt(6) entry (commented by default)
1997-10-04 13:16:00 +04:00
#hunt dgram udp wait nobody /usr/games/huntd huntd
make these changes to the default user.group: - internal services run as `nobody' - rpc.rusersd and rpc.sprayd run as `nobody' - rpc.rstatd run as `nobody.kmem' - rpc.rwalld run as `nobody.tty'
1997-10-07 16:45:32 +04:00
#
# Internal services
#
cleanup Lite-1 merge
1997-02-15 13:02:07 +03:00
#tcpmux stream tcp nowait root internal
make these changes to the default user.group: - internal services run as `nobody' - rpc.rusersd and rpc.sprayd run as `nobody' - rpc.rstatd run as `nobody.kmem' - rpc.rwalld run as `nobody.tty'
1997-10-07 16:45:32 +04:00
#echo stream tcp nowait nobody internal
move tcp6/udp6 entries upwards so that they do not get out of sync with IPv4 services. add kerberos-adm and internal services (like echo) on tcp/udp6.
2000-12-31 09:06:50 +03:00
#echo stream tcp6 nowait nobody internal
make these changes to the default user.group: - internal services run as `nobody' - rpc.rusersd and rpc.sprayd run as `nobody' - rpc.rstatd run as `nobody.kmem' - rpc.rwalld run as `nobody.tty'
1997-10-07 16:45:32 +04:00
#discard stream tcp nowait nobody internal
move tcp6/udp6 entries upwards so that they do not get out of sync with IPv4 services. add kerberos-adm and internal services (like echo) on tcp/udp6.
2000-12-31 09:06:50 +03:00
#discard stream tcp6 nowait nobody internal
make these changes to the default user.group: - internal services run as `nobody' - rpc.rusersd and rpc.sprayd run as `nobody' - rpc.rstatd run as `nobody.kmem' - rpc.rwalld run as `nobody.tty'
1997-10-07 16:45:32 +04:00
#chargen stream tcp nowait nobody internal
move tcp6/udp6 entries upwards so that they do not get out of sync with IPv4 services. add kerberos-adm and internal services (like echo) on tcp/udp6.
2000-12-31 09:06:50 +03:00
#chargen stream tcp6 nowait nobody internal
Disable everything except ftpd and telnetd by default.
1999-11-05 14:16:20 +03:00
#daytime stream tcp nowait nobody internal
move tcp6/udp6 entries upwards so that they do not get out of sync with IPv4 services. add kerberos-adm and internal services (like echo) on tcp/udp6.
2000-12-31 09:06:50 +03:00
#daytime stream tcp6 nowait nobody internal
Disable everything except ftpd and telnetd by default.
1999-11-05 14:16:20 +03:00
#time stream tcp nowait nobody internal
move tcp6/udp6 entries upwards so that they do not get out of sync with IPv4 services. add kerberos-adm and internal services (like echo) on tcp/udp6.
2000-12-31 09:06:50 +03:00
#time stream tcp6 nowait nobody internal
make these changes to the default user.group: - internal services run as `nobody' - rpc.rusersd and rpc.sprayd run as `nobody' - rpc.rstatd run as `nobody.kmem' - rpc.rwalld run as `nobody.tty'
1997-10-07 16:45:32 +04:00
#echo dgram udp wait nobody internal
move tcp6/udp6 entries upwards so that they do not get out of sync with IPv4 services. add kerberos-adm and internal services (like echo) on tcp/udp6.
2000-12-31 09:06:50 +03:00
#echo dgram udp6 wait nobody internal
make these changes to the default user.group: - internal services run as `nobody' - rpc.rusersd and rpc.sprayd run as `nobody' - rpc.rstatd run as `nobody.kmem' - rpc.rwalld run as `nobody.tty'
1997-10-07 16:45:32 +04:00
#discard dgram udp wait nobody internal
move tcp6/udp6 entries upwards so that they do not get out of sync with IPv4 services. add kerberos-adm and internal services (like echo) on tcp/udp6.
2000-12-31 09:06:50 +03:00
#discard dgram udp6 wait nobody internal
make these changes to the default user.group: - internal services run as `nobody' - rpc.rusersd and rpc.sprayd run as `nobody' - rpc.rstatd run as `nobody.kmem' - rpc.rwalld run as `nobody.tty'
1997-10-07 16:45:32 +04:00
#chargen dgram udp wait nobody internal
move tcp6/udp6 entries upwards so that they do not get out of sync with IPv4 services. add kerberos-adm and internal services (like echo) on tcp/udp6.
2000-12-31 09:06:50 +03:00
#chargen dgram udp6 wait nobody internal
make these changes to the default user.group: - internal services run as `nobody' - rpc.rusersd and rpc.sprayd run as `nobody' - rpc.rstatd run as `nobody.kmem' - rpc.rwalld run as `nobody.tty'
1997-10-07 16:45:32 +04:00
#daytime dgram udp wait nobody internal
move tcp6/udp6 entries upwards so that they do not get out of sync with IPv4 services. add kerberos-adm and internal services (like echo) on tcp/udp6.
2000-12-31 09:06:50 +03:00
#daytime dgram udp6 wait nobody internal
make these changes to the default user.group: - internal services run as `nobody' - rpc.rusersd and rpc.sprayd run as `nobody' - rpc.rstatd run as `nobody.kmem' - rpc.rwalld run as `nobody.tty'
1997-10-07 16:45:32 +04:00
#time dgram udp wait nobody internal
move tcp6/udp6 entries upwards so that they do not get out of sync with IPv4 services. add kerberos-adm and internal services (like echo) on tcp/udp6.
2000-12-31 09:06:50 +03:00
#time dgram udp6 wait nobody internal
cleanup Lite-1 merge
1997-02-15 13:02:07 +03:00
#qotd stream tcp nowait nobody /usr/games/fortune fortune
move tcp6/udp6 entries upwards so that they do not get out of sync with IPv4 services. add kerberos-adm and internal services (like echo) on tcp/udp6.
2000-12-31 09:06:50 +03:00
#qotd stream tcp6 nowait nobody /usr/games/fortune fortune
make these changes to the default user.group: - internal services run as `nobody' - rpc.rusersd and rpc.sprayd run as `nobody' - rpc.rstatd run as `nobody.kmem' - rpc.rwalld run as `nobody.tty'
1997-10-07 16:45:32 +04:00
#
# Kerberos authenticated services
#
disable kerberos version of rsh/rlogin, because things don't work properly if they're enabled and the programs don't support kerberos (by default, the NetBSD programs don't.)
1994-12-23 18:12:39 +03:00
#klogin stream tcp nowait root /usr/libexec/rlogind rlogind -k
#eklogin stream tcp nowait root /usr/libexec/rlogind rlogind -k -x
#kshell stream tcp nowait root /usr/libexec/rshd rshd -k
make these changes to the default user.group: - internal services run as `nobody' - rpc.rusersd and rpc.sprayd run as `nobody' - rpc.rstatd run as `nobody.kmem' - rpc.rwalld run as `nobody.tty'
1997-10-07 16:45:32 +04:00
#
# Services run ONLY on the Kerberos server
#
Remove the (not supported) krbupdate service, and add (commented out) kerberos-adm.
2000-08-05 04:48:15 +04:00
#kerberos-adm stream tcp nowait root /usr/libexec/kadmind kadmind
move tcp6/udp6 entries upwards so that they do not get out of sync with IPv4 services. add kerberos-adm and internal services (like echo) on tcp/udp6.
2000-12-31 09:06:50 +03:00
#kerberos-adm stream tcp6 nowait root /usr/libexec/kadmind kadmind
kpasswd is a "wait" type service.
2001-03-26 02:33:15 +04:00
#kpasswd dgram udp wait root /usr/libexec/kpasswdd kpasswdd
#kpasswd dgram udp6 wait root /usr/libexec/kpasswdd kpasswdd
make these changes to the default user.group: - internal services run as `nobody' - rpc.rusersd and rpc.sprayd run as `nobody' - rpc.rstatd run as `nobody.kmem' - rpc.rwalld run as `nobody.tty'
1997-10-07 16:45:32 +04:00
#
Add (commented out) hprop service, along with a short explanation of when to enable it and why.
2000-08-07 00:35:13 +04:00
# The hprop service is run on slave KDCs to receive the database from
# the master KDC.
#hprop stream tcp nowait root /usr/libexec/hpropd hpropd
#
make these changes to the default user.group: - internal services run as `nobody' - rpc.rusersd and rpc.sprayd run as `nobody' - rpc.rstatd run as `nobody.kmem' - rpc.rwalld run as `nobody.tty'
1997-10-07 16:45:32 +04:00
# RPC based services
#
Allow a higher count of started services for broadcast RPC services. Since rpcbind version 3 and 4 clients will try broadcasts using both the old and new protocol for IPv4, the double amount of packets may come in, causing bogus "service looping" events in inetd.
2000-06-22 15:35:13 +04:00
#rstatd/1-3 dgram rpc/udp wait:100 nobody:kmem /usr/libexec/rpc.rstatd rpc.rstatd
move tcp6/udp6 entries upwards so that they do not get out of sync with IPv4 services. add kerberos-adm and internal services (like echo) on tcp/udp6.
2000-12-31 09:06:50 +03:00
#rstatd/1-3 dgram rpc/udp6 wait:100 root /usr/libexec/rpc.rstatd rpc.rstatd
Allow a higher count of started services for broadcast RPC services. Since rpcbind version 3 and 4 clients will try broadcasts using both the old and new protocol for IPv4, the double amount of packets may come in, causing bogus "service looping" events in inetd.
2000-06-22 15:35:13 +04:00
#rusersd/2-3 dgram rpc/udp wait:100 nobody /usr/libexec/rpc.rusersd rpc.rusersd
move tcp6/udp6 entries upwards so that they do not get out of sync with IPv4 services. add kerberos-adm and internal services (like echo) on tcp/udp6.
2000-12-31 09:06:50 +03:00
#rusersd/2-3 dgram rpc/udp6 wait:100 root /usr/libexec/rpc.rusersd rpc.rusersd
Disable everything except ftpd and telnetd by default.
1999-11-05 14:16:20 +03:00
#walld/1 dgram rpc/udp wait nobody:tty /usr/libexec/rpc.rwalld rpc.rwalld
make these changes to the default user.group: - internal services run as `nobody' - rpc.rusersd and rpc.sprayd run as `nobody' - rpc.rstatd run as `nobody.kmem' - rpc.rwalld run as `nobody.tty'
1997-10-07 16:45:32 +04:00
#sprayd/1 dgram rpc/udp wait nobody /usr/libexec/rpc.sprayd rpc.sprayd
sprayd & rquotad: disabled by default
1994-06-24 11:46:19 +04:00
#rquotad/1 dgram rpc/udp wait root /usr/libexec/rpc.rquotad rpc.rquotad
Reference in New Issue Copy Permalink