topic Re: Disabling telnetd and ftp in Operating System - HP-UX

Disabling telnetd and ftp

Chern Jian Leaw — Thu, 13 Feb 2003 11:57:17 GMT

Hi,

I'd like to disable the telnet and ftp services running on my HP11.0 machine. I tried commenting following lines in the /etc/inetd.conf file:

ftp stream tcp nowait root /usr/lbin/ftpd ftpd -l
telnet stream tcp nowait root /usr/lbin/telnetd telnetd -b /etc/issue

However, commenting both lines in the /etc/inetd.conf file did not work. I also tried killing their daemon processes but to no avail. Hence, I'm still able to do a telnet or ftp from the particular machine which I tried killing those process.

Is there a way which I can disable the telnet and ftp services on my HP11.0 machine?

Could someone help me out and show me the correct method?

Thanks

Re: Disabling telnetd and ftp

T G Manikandan — Thu, 13 Feb 2003 11:59:21 GMT

Commenting was right in the /etc/inetd.conf file.
Did you re-read your inetd.conf file using

#/usr/sbin/inetd -c

REvert

Re: Disabling telnetd and ftp

Rainer von Bongartz — Thu, 13 Feb 2003 12:04:10 GMT

Make inetd re-read its configuration file:

/usr/sbin/inetd -c

Regards
Rainer

Re: Disabling telnetd and ftp

Jose Mosquera — Thu, 13 Feb 2003 12:12:36 GMT

Hi,

Other possible way is via /var/adm/inetd.sec file:

telnet deny *
ftp deny *

Also to avoid remote shell (remsh) and remote copies (rcp) set this:

shell deny *

Rgds.

Re: Disabling telnetd and ftp

Chern Jian Leaw — Thu, 13 Feb 2003 12:17:54 GMT

Rainer & TG,

I tried doing /usr/sbin/inetd -c, and other machines now COULD NOT telnet or ftp into that particular machine i.e machA:

machB% telnet machA
trying 10.1.20.200 ...
telnet:connect to address 10.1.20.200: Connection refused

machB% ftp machA
ftp: connect: Connection refused

However, the telnet daemon is still alive. Does it matter? Will there be any other issues if the daemon is alive but the service is already commented from the /etc/inetd.conf file?

Thanks

Re: Disabling telnetd and ftp

Jose Mosquera — Thu, 13 Feb 2003 12:18:19 GMT

Hi again,

Ussing /var/adm/inetd.sec you have serveral useful combinations to allow|deny totally or partially services, pls read about:
#man inetd.sec

Rgds.

Re: Disabling telnetd and ftp

T G Manikandan — Thu, 13 Feb 2003 12:24:46 GMT

probably that is a old process that is running.

Each telnetd process starts when there is a request from the client.

Thanks

Re: Disabling telnetd and ftp

Rainer von Bongartz — Thu, 13 Feb 2003 12:32:17 GMT

just kill away the telnetd.
inetd will not restart a new one

Regards
Rainer