d/freebsd-dev
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity
46,163 Commits 72 Branches 135 Tags 3.2 GiB
c66bb85011
Commit Graph

43 Commits

Author SHA1 Message Date
Yoshinobu Inoue
c66bb85011 Add IPv6 services into inetd.conf. 
Also enable some standard IPv6 apps by default.
These entries will be simply ignored on systems with no INET6 defined.

Approved by: jkh
Suggested by: peter
 2000-02-27 18:39:34 +00:00
Daniel Baker
dcca9856c6 Include a note below the example qmail entry that mentions that inetd is 
no longer the correct way to have qmail handle incoming qmail smtp
connections.  Also provide a url to the correct method.
 2000-01-10 20:02:28 +00:00
Peter Wemm
6e6afaaf50 Update the cvs pserver example so that it gives some more obvious clues 
about the --allow-root switch.

PR:		14463
 1999-12-26 15:18:58 +00:00
Peter Wemm
9b7a44a60e $Id$ -> $FreeBSD$ 1999-08-27 23:37:10 +00:00
Brian Feldman
22a8ff637d Add -n to the example and explanation of the internal auth service. 1999-07-24 17:19:54 +00:00
Sheldon Hearn
3467b84849 Document the -o and -t options to the internal auth service and give an 
example of their usage in the sample config. Merge the two examples
for the green internal auth service.

This commit failed the first time around because Brian beat me to the
punch on inetd.8 . I like my descriptions better and I'm pretty sure
Brian won't mind.
 1999-07-23 15:49:34 +00:00
Brian Feldman
e1e112f9a0 I think the last revision got lost here. Identd needs to be run as root, 
at least for now. I relegated the getcred sysctls to only root, but if
they're deemed to be "allowable" to export to users, I'll do so and
revert this change.
 1999-07-16 16:24:13 +00:00
Sheldon Hearn
2ab0563dfe Document the new {auth,ident,tap} service and provide examples in the 
configuration file.

Requested by:	green
 1999-07-16 15:41:14 +00:00
Brian Feldman
d33eb4c802 This is the working internal ident service. Turn it on by setting 
the make variable REAL_IDENT, and ~/.fakeid support can be added
with FAKEID set. Note that the default behavior is the same as
the old behavior.
 1999-07-15 01:34:02 +00:00
Andrey A. Chernov
a752e66f03 Due to recent pidentd port changes (switch to sysctl), identd must be 
runned as root again, not kmem:kmem
 1999-07-15 01:06:13 +00:00
Matthew Dillon
822ef72a9d comsat sandbox prevents biff/comsat from being able to print partial 
mailbox contents.  comsat instead simply prints that new mail is
    available.  Add appropriate comment to inetd.conf but leave comsat in
    sandbox.
 1998-12-01 22:01:59 +00:00
Matthew Dillon
ac48aa416a Added group bind(53), added sandbox users tty(4), kmem(5), and bind(53), 
adjustd inetd.conf to run comsat and ntalk from tty sandbox, and
    the (commented out) ident from the kmem sandbox.

    Note that it is necessary to give each group access it's own uid to
    prevent programs running under a single uid from being able to gdb
    or otherwise mess with other programs (with different group perms) running
    under the same uid.
 1998-12-01 21:19:49 +00:00
Poul-Henning Kamp
83713d0b04 Add example for the internal "ident server". 1998-11-04 19:42:35 +00:00
Wolfram Schneider
b78e5d76ba Limit the fingerd daemon to: 
runs only 3 simultaneous fingerd processes and
        limit the connections-per-ip-per-minute to 10.
 1998-09-30 16:12:40 +00:00
Brian Somers
a19eda1f28 Add Id keywords 1998-09-02 01:34:57 +00:00
Mark Murray
da892a30fd Clean up the kerberos entries, and add example CVS entries 1998-08-15 17:32:27 +00:00
Tim Vanderhoek
e3d2337be7 MFC: sample qmail entry. 1998-07-18 20:01:03 +00:00
Jordan K. Hubbard
0b104e4078 Restore the Samba entries which were spammed when someone added 
the imap4 entry.
 1997-09-28 22:25:29 +00:00
Andrey A. Chernov
6930f84b7b Add commented out example entry for imap4 1997-01-12 17:55:16 +00:00
Peter Wemm
7737a49d16 The kerberised network services should only be active in inetd.conf 
if kerberos is installed.  So far as I'm aware, kerberos aware clients
detect ECONNREFUSED and (if allowed) fall back to the non-kerberos
servers.  They do not know how to interpret messages such as
"rlogind: unknown option -k".

I believe Garrett also mentioned this.

Unfortunately, this adds an extra step to bringing up kerberos.

It also stops /var/log/messages getting quite so many useless (and
confusing) error messages when somebody does a port scan on you.
 1996-11-10 13:06:14 +00:00
Paul Traina
9080596148 In the brave new world, that that does not make us strong, kills us. 
Turn OFF the "small servers" by default.  FreeBSD systems should only
serve actively used programs.  Jewels like chargen and echo are too
useful in attack scenarios.
 1996-10-02 03:52:58 +00:00
Poul-Henning Kamp
6d26aec672 Add commented out example for bootps 1996-09-19 08:19:25 +00:00
Thomas Graichen
7c1caee10f changed /etc/[daily,weekly,monthly] to not rotate the logfiles by 
"hand", changed /etc/crontab to call /usr/sbin/newsyslog every hour
(the entry was there before - but we haven't had any newsyslog until
today :-) and changed /etc/inetd.conf to also contain (commentet out)
entries for rpc.rquotad and rpc.sprayd (taken from NetBSD)
 1996-01-05 10:09:13 +00:00
Joerg Wunsch
a66e17dec5 Add /tftpboot as an argument to the commented-out example for tftp, so 
people don't compromise their system by blindly un-commenting the
entry.
 1995-12-23 17:12:49 +00:00
Justin T. Gibbs
8344d39ad7 inetd.conf: 
Add rkinit at 2108/tcp.

services:
Add rkinitd.
 1995-09-15 22:02:06 +00:00
Andrey A. Chernov
61a65662e5 Restore tabs in inetd line 
Submitted by:
Obtained from:
 1995-07-29 22:22:08 +00:00
Andrey A. Chernov
f9c9747496 Rename in.identd -> identd according recent ports rename 1995-07-27 23:56:43 +00:00
Andrey A. Chernov
9265b96620 Add ident (commented out) 1995-04-08 16:21:45 +00:00
Garrett Wollman
b67268cfbc Disable UDP echo, chargen, date, and daytime services. 1994-12-21 20:32:44 +00:00
Andrey A. Chernov
dcb4550cb2 Uncomment uucpd by default, it is working and secure now 1994-12-19 01:11:19 +00:00
Andreas Schulz
85e5776f0a Change the example line for popper to point to /usr/local/libexec/popper 
instead of /usr/local/etc/popper. The 2.0 installation installs it there.
 1994-11-18 20:01:21 +00:00
Paul Traina
cf84309919 Secure fingerd by default 1994-09-29 09:58:07 +00:00
Paul Traina
ba84155d71 Disable rexecd by default (major security hole) 1994-09-29 09:20:40 +00:00
Paul Traina
d808fe8f6d Add an entry for pcnfsd (commented out) 1994-09-28 17:09:38 +00:00
Garrett Wollman
e4d7745b19 Added comment about registerd and kpasswdd not working in 1.x. 
Deleted commented-out line which would start mountd; that's not
the right pplace to do it (don't confuse the users).
Should probablyhave uncommented rpc.rstatd, but didn't.
 1994-06-13 22:41:04 +00:00
Andrey A. Chernov
6aba0e831e Comment out uucpd, not properly configured as default 
Comment out walld/rusersd/rstatd, may be too verbose
 1994-05-31 17:55:38 +00:00
Andrey A. Chernov
5f7d00d180 Uncomment uucpd, now it works 
Uncomment rstatd/rusersd/rwalld all three worked
mountd still commented out, I remember some problem with it
 1994-05-31 04:48:49 +00:00
Andreas Schulz
71e44e722b Added entries for sup into services. 
Added an example entry for the pop3 popper into inetd.conf as a comment.
 1993-12-05 16:39:47 +00:00
Rodney W. Grimes
e46cfc3249 Change space to tab in ruserd line per Guido van Rooij 1993-10-21 17:34:32 +00:00
Rodney W. Grimes
911d8c1f44 Disable rpc services so that inetd no longer hangs when you are not 
running portmapper.  These are site specific functionality and should only
be enabled for sites that want them, not by default.

These services REQUIRE portmapper to be running
 1993-10-13 06:32:06 +00:00
J.T. Conklin
bbc2a68087 Entries so RPC servers are started. 1993-09-23 17:41:08 +00:00
Rodney W. Grimes
037db89fb1 Added /etc/networks to the files that get installed, some how it got 
dropped out of the Makefile.  Commented out talk in inetd.conf since
it refers to the old non-existent otalkd.
 1993-09-02 11:10:02 +00:00
Rodney W. Grimes
1bf9d5d951 Initial import of 386BSD 0.1 othersrc/etc 1993-06-20 13:41:45 +00:00