topic Re: Inetd.sec in Operating System - HP-UX

Inetd.sec

Christina Martin — Fri, 03 Sep 2004 08:43:22 GMT

We're trying to figure out if what we have is a 'bug' or not.

in the inetd.sec file we did this:

telnet allow
localhost
123.345.56.7 Dummy Host
987.87.5.322 # Dummy Ahost
584.485.5.7 Bhost Dummy\#

we were STILL able to connect to the machine from each of the dummy hosts. Theoretically, I shouldn't have been able to, right? What terminates the telnet allow in this case?

IF we move local host up to the telnet allow line, the the file works as it should.

Re: Inetd.sec

Jeff Schussele — Fri, 03 Sep 2004 08:49:30 GMT

Hi Danny,

Although multiple lines are "not unsupported" (from the man page), all lines but the last are ignored.
SO what you need to do is continue the line with the "\" character.

HTH,
Jeff

Re: Inetd.sec

Christina Martin — Fri, 03 Sep 2004 08:52:03 GMT

Jeff, if all lines were ignored wouldn't I have been denied access to the server? or does it not even read the telnet allow line thereby bypassing it?

Re: Inetd.sec

Muthukumar_5 — Fri, 03 Sep 2004 08:58:30 GMT

By default setting we can not use multiple line settins on inetd.sec file.

Your current setting is capable to allow ALL to access telnet service.

telnet allow

--> which makes to get access on telnet service.

And if you are trying comments then use as like
# Dummy Ahost

But 987.87.5.322 # Dummy Ahost will not make sense.

You have to set as,

# To allow telnet service localhost Dummy Host and Dummy Ahost Bhost Dummy

telnet allow localhost 123.345.56.7
987.87.5.322 584.485.5.7

Regards
Muthu