topic Re: Turning off tftp for ignite in Operating System - HP-UX

Turning off tftp for ignite

Debbie Beresford — Tue, 22 Sep 2015 12:35:32 GMT

A security scan was done on our system and I have been asked to turn off tftp. I have been doing some research but I am getting very frustrated with links that go nowhere.

If what I am reading is correct, tftp must be active on the ignite server but not the client. We have 4 HP systems and no ignite server. We are running Ignite-UX C.6.1.44 on PA-Risc systems with HP-UX 11.23 O/S. Ignite backups are run weekly to tape and then used to recover at our DR site as required.

Since our server and client are one in the same, it looks like I should be able to turn off tftp as there is nothing to transfer from another server. Can anyone confirm this?

I realize we are running an older version of ignite-ux and we will eventually update. However, in the short term disabling tftp is the quickest way to satisfy our security team.

TIA

Re: Turning off tftp for ignite

Patrick Wallek — Tue, 22 Sep 2015 13:53:06 GMT

In your case you can safely turn off tftp in /etc/inted.conf.

Since you are backing up to tape there is no need whatsoever for tftp.

Edit your /etc/inetd.conf file and comment out the appropriate line(s) for tftp. Once done, run 'inetd -c' to force inetd to reread its configuration from the inetd.conf file.

Re: Turning off tftp for ignite

Debbie Beresford — Tue, 22 Sep 2015 15:35:53 GMT

Thank you very much for your response. I will make the change.