topic need to disable telnet,SNMP etc srvices from server in Operating System - HP-UX

need to disable telnet,SNMP etc srvices from server

Sreer — Sun, 17 Jan 2010 19:25:02 GMT

Hi Gurus,

I have to disable the services mentioned below:
disable following services:
-SNMP
-telnet
-rexec
-rlogin

Can you pls guide me?

Is it only commenting these serices from /etc/rc.config.d/netconf ?

or any other files also need to modify?

thanks for your quick reply.

regards

sree

Re: need to disable telnet,SNMP etc srvices from server

Sreer — Sun, 17 Jan 2010 19:39:46 GMT

hi ,
Sorry a small mistake happened.

it is /etc/inetd.conf...

after puting a # infront of the concerned line we need to run inetd -c

is it enough for all services to disable?

rgds
sree

Re: need to disable telnet,SNMP etc srvices from server

Steven Schweda — Sun, 17 Jan 2010 21:14:34 GMT

> is it enough for all services to disable?

Should be, if there's an entry in
"/etc/inetd.conf" for each service which you
would like to disable.

It should be easy enough to test them. I'd
expect a "connection refused" error if the
service has been disabled.

Re: need to disable telnet,SNMP etc srvices from server

Johnson Punniyalingam — Mon, 18 Jan 2010 01:48:46 GMT

>>Is it only commenting these services from /etc/rc.config.d/netconf ?<<<

netconf file refer to

netconf file allows you to identify the network interface name, IP address, and subnet mask of your LAN card, and add entries to the network routing table. As the netconf file has read-only permission, you must have superuser capability to make modifications to this file

nothing to do with "netconf" file, to disable the services like "SNMP,telnet,rexecrlogin" ..

services are listed under /etc/services

The file /etc/services associates official service names and aliases
with the port number and protocol the services use

inetd(1M) inetd(1M)

NOTE: Services currently supported by inetd will work in an IPv6
environment with a few changes to the configuration file
/etc/inetd.conf. (See inetd.conf(4)). When invoked, inetd reads
/etc/inetd.conf and configures itself to support whatever services are
included in that file (see inetd.conf(4)). The inetd daemon also
performs a security check if the file /var/adm/inetd.sec exists

Re: need to disable telnet,SNMP etc srvices from server

Johnson Punniyalingam — Mon, 18 Jan 2010 01:53:25 GMT

if you like to disable services like telnet .etc you need to look for file /etc/services

comment the services by # of the /etc/services
followed by inetd -c to re-read the services files.

Example :-

step 1:-

vi /etc/services

# telnet 23/tcp # Virtual Terminal Protocol

step 2 :-

inetd -c

Re: need to disable telnet,SNMP etc srvices from server

Steven Schweda — Mon, 18 Jan 2010 06:49:25 GMT

> comment the services by # of the /etc/services

PLEASE, do not do this. Give "/etc/services"
a well deserved rest, and just leave it in
peace.

Removing/commenting a service in
"/etc/services" may not disable the service,
and it could cause other problems.

man services

[...]
The file /etc/services associates official
service names and aliases with the port
number and protocol the services use.
[...]

man inetd.conf

[...]
On invocation, the inetd daemon reads its
configuration information from the
/etc/inetd.conf configuration file, [...]

One file is for mapping service names to
numbers. The other is a configuration file
for inetd. If you wish to control the
services offered by inetd, then its
configuration file is the one to edit.

LEAVE "/etc/services" AS IT IS (unless you
_really_ need to _add_ something to it, or,
much less likely, change something in it).

Re: need to disable telnet,SNMP etc srvices from server

Johnson Punniyalingam — Mon, 18 Jan 2010 06:53:43 GMT

sorry my mistake... please # comment the services by # of the /etc/inetd.conf

sincere apologies :( :( . sorry

Re: need to disable telnet,SNMP etc srvices from server

sujit kumar singh — Mon, 18 Jan 2010 08:06:22 GMT

hi

for the snmp part to be desabled, please do the following things:

for the following files in /etc/rc.config.d/

SnmpHpunix
SnmpIpv6
SnmpMaster
SnmpMib2
SnmpNaa
SnmpTrpDst

edit all of them to put 0 in place of 1 so that these do not startup as the system starts.

/sbin/init.d/SnmpFddi4 stop
/sbin/init.d/SnmpHpunix stop
/sbin/init.d/SnmpIpv6 stop
/sbin/init.d/SnmpMaster stop
/sbin/init.d/SnmpMib2 stop
/sbin/init.d/SnmpNaa stop
/sbin/init.d/SnmpTrpDst stop

Re: need to disable telnet,SNMP etc srvices from server

AVV — Mon, 18 Jan 2010 08:33:19 GMT

Hi Sreekumar,

Please disable the same on /etc/inetd.conf. Ensure you had a backup before you do any editing - BEST PRACTICE :)

Re: need to disable telnet,SNMP etc srvices from server

Sreer — Mon, 18 Jan 2010 18:12:34 GMT

Hi All,
Thanks a lot for your valuble inputs.!!

Hi Ajesh,

How are you?

Thanks for your support!

Rgds Sree