Disabling telnetd and ftp

[Chern Jian Leaw]

Hi,

I'd like to disable the telnet and ftp services running on my HP11.0 machine. I tried commenting following lines in the /etc/inetd.conf file:

ftp stream tcp nowait root /usr/lbin/ftpd ftpd -l
telnet stream tcp nowait root /usr/lbin/telnetd telnetd -b /etc/issue

However, commenting both lines in the /etc/inetd.conf file did not work. I also tried killing their daemon processes but to no avail. Hence, I'm still able to do a telnet or ftp from the particular machine which I tried killing those process.

Is there a way which I can disable the telnet and ftp services on my HP11.0 machine?

Could someone help me out and show me the correct method?

Thanks

[T G Manikandan · Accepted solution]

Commenting was right in the /etc/inetd.conf file.
Did you re-read your inetd.conf file using

#/usr/sbin/inetd -c

REvert

[Rainer von Bongartz]

Make inetd re-read its configuration file:

/usr/sbin/inetd -c

Regards
Rainer

[Jose Mosquera]

Hi,

Other possible way is via /var/adm/inetd.sec file:

telnet deny *
ftp deny *

Also to avoid remote shell (remsh) and remote copies (rcp) set this:

shell deny *

Rgds.

[Chern Jian Leaw]

Rainer & TG,

I tried doing /usr/sbin/inetd -c, and other machines now COULD NOT telnet or ftp into that particular machine i.e machA:

machB% telnet machA
trying 10.1.20.200 ...
telnet:connect to address 10.1.20.200: Connection refused

machB% ftp machA
ftp: connect: Connection refused

However, the telnet daemon is still alive. Does it matter? Will there be any other issues if the daemon is alive but the service is already commented from the /etc/inetd.conf file?

Thanks

[Jose Mosquera]

Hi again,

Ussing /var/adm/inetd.sec you have serveral useful combinations to allow|deny totally or partially services, pls read about:
#man inetd.sec

Rgds.

[T G Manikandan]

probably that is a old process that is running.

Each telnetd process starts when there is a request from the client.

Thanks

[Rainer von Bongartz]

just kill away the telnetd.
inetd will not restart a new one

Regards
Rainer