Very Computer

by **wes..** » Thu, 28 Nov 1996 04:00:00

How do I turn this off for external users?
The man is unhelpful, and the rc.d scripts do not show
where it is turned on.

Thanks Joel

by **Ron Grig** » Fri, 29 Nov 1996 04:00:00

> How do I turn this off for external users?
> The man is unhelpful, and the rc.d scripts do not show
> where it is turned on.

> Thanks Joel

See your /etc/inetd.conf file. There are some entries in it that you
can comment out to increase security. Once you have made your changes
you will have to do a "kill -HUP pid#" (pid# = inetd process ID number)
to restart the inetd daemon (or simply reboot) for the changes to take
effect.

--
+----------------------------------------------------------------+

|Grigg Consulting - 2009 Westwood Ave. - Springdale, Ar - 72762 |
+----------------------------------------------------------------+

by **B.A.McCau..** » Sat, 30 Nov 1996 04:00:00

>How do I turn this off for external users?
>The man is unhelpful, and the rc.d scripts do not show
>where it is turned on.

man 5 hosts_access

--

. _\\__[oo from | Phones: +44 121 471 3789 (home)

. l___\\ /~~) /~~[ / [ | PGP-fp: D7 03 2A 4B D8 3A 05 37...
# ll l\\ ~~~~ ~ ~ ~ ~ | http://wcl-l.bham.ac.uk/~bam/

by **James Va** » Sat, 30 Nov 1996 04:00:00

> How do I turn this off for external users?
> The man is unhelpful, and the rc.d scripts do not show
> where it is turned on.

If you're using the tcpd security wrapper in /etc/inetd.conf you
could try something like:

#/etc/hosts.allow
in.fingerd: LOCAL
ALL: LOCAL

#/etc/hosts.deny
ALL: ALL

Better though, is to use cfingerd from sunsite.

-eof-

by **Brian Stempe** » Mon, 02 Dec 1996 04:00:00

Comment out the finger section in your /etc/inetd.conf. Then kill -HUP
the inetd process. This disables remote fingering, but people on the
local system can still do it.

-Brian
--

========================================
Brian Stempel
Network Administration // Imagenet, Inc.

========================================

by **Brian Stempe** » Tue, 03 Dec 1996 04:00:00

Quote:|> () writes:

What?! Why make things difficult? Just comment out the finger
section in inetd.conf and HUP the inetd process. The rc.d
scripts don't show where it's turned on because the scripts
don't turn 'fingerd' on, at least not directly. The scripts
start inetd, the Internet daemon, which listens on certain well
known ports (mentioned in /etc/services), and then spawns
processes based on connect requests to those ports according to
/etc/inetd.conf.

-Brian
--

========================================
Brian Stempel
Network Administration // Imagenet, Inc.

========================================