/etc/services and inetd.sec

[Joseph Bague]

Good day,

Is it possible to specify a port on /etc/services like oracle port. then use the inetd.sec to restrict the ip who want to access the oracle.

If not is there another solution.

[Ravi_8 · Accepted solution]

Hi,

It's possible

look at some the ports we are using for MQSeries testing.

# Required for MQ Inatall/Migration/CSD QMGR and Channel testing
MQXZ1 1422/tcp # MQ XZ
MQXZ2 1423/tcp # MQ XZ
MQXZ3 1424/tcp # MQ XZ
MQXZ4 1429/tcp # MQ XZ
MQXZ5 1430/tcp # MQ XZ
MQCOM1 1455/tcp # MQ test port
MQCOM2 1456/tcp # MQ test port

[Sudhakar_7]

Yes

see man inetd.sec

Regards

Sudhakar J

[avsrini]

Hi Joseph,

Inetd.sec provides an additional layer of security to services started / provided by inetd daemon.

If you run a service through inetd daemon ( entry in /etc/inetd.conf ), on a given port (/etc/services ) then, Yes you can use inetd.sec to restrict access.


Srini.

[Joseph Bague]

Ravi,

Do you specify your MQseries on inetd.conf or just in services only?

[Sunil Sharma_1]

Hi,
You have to make entry in /etc/services and /etc/inetd.conf
once this thing is done then you can use inetd.sec to add another layer of security.
if you r using HP UX 11i you can use ipfilter/9000 to do this.
http://www.hp.com/products1/unix/operating/infolibrary/briefs/ipfilter_sbrief_0204.pdf

This may help you


sunil

[Ravi_8]

Hi,

sorry for the delay. as i was in busy.

Yes we specify in inetd.conf also

# grep -i regr services inetd.conf
services:#For MQSeries Regression
services:REGR 3600/tcp
inetd.conf:#For MQSeries Regression and Stress
inetd.conf:REGR stream tcp nowait mqm /opt/mqm/bin/amqcrsta amqcrsta -m RE