inetd.sec file

[hqs4500]

i have a /var/adm/inetd.sec file that says:
telnet allow 35 200 119 209 195 42 44 25
ftp allow 35 200 119 209 195 42 25 44 2065 1197 1097 141 10193 1065 11161 11129 11193 10129 1465 121 1433 111 1265 1233 10161 13137 1033 531.

what did these figures mean?
Any response is appreciated.Thank you in advance.

[Dave Olker]

Those entries look bogus to me. The syntax for allow/deny entries is spelled out in the inetd.sec man page. Here is the relevant snippet of how the host/network portion of the entry is specified:

_________________________________________

For example, to allow all hosts with network addresses starting with a 10, as well as the single host with address 192.54.24.5 to use rlogin:

login allow 10.* 192.54.24.5

On a system running NFS, deny host 192.54.24.5 access to sprayd, an RPC-based server:

sprayd deny 192.54.24.5

A range is a field containing a - character. To deny hosts in network 10 (arpa) with subnets 3 through 5 access to remsh:

shell deny 10.3-5.*

The following entry denies rlogin access to host cory.berkeley.edu, any hosts on the network named testlan, and the host with internet address 192.54.24.5:

login deny 192.54.24.5 cory.berkeley.edu testlan
_________________________________________


As you can see, the proper syntax is either a true ###.###.###.### notation or some abbreviated version using wildcards and range characters.

I've never seen entries like the ones in your file. While some of the numbers in the entries could potentially be part of an IP address or network address, others - like any number with more than 3 characters, or any 3 digit numbers greater than 255 - are not valid IP address values.

Has this configuration been working at your site?

Regards,

Dave

[Bharat Katkar]

HI,
Yes as already told, the syntax of your entries is not correct. It should be as follows:


i.e. for e.g.
telnet allow 192.168.1.0,System1,System2

This file allows you to add extra level of security to System. It is quite simple and easy to undestand.
You need to also go through /etc/services /etc/protocols file to understand different services and the ports they use.

Hope that helps.
Regards,

[bhavin asokan]

hi,

can you post a copy of /etc/hosts , /etc/services , /var/adm/inetd.sec files.

regds,

[Shaikh Imran]

Hi,
I have not seen this before.
These maybe invalid entries.
They are not allowed there is a possibility of mistake while doing vi others for correct
entries follow this :
http://www.informatik.uni-frankfurt.de/doc/man/hpux/inetd.conf.4.html

Regards,

[hqs4500]

Thank you all!
I am so sorry.I found these figures are host name of some machines after checking /etc/hosts.
Thank you very much,anyway.

[Muthukumar_5]

But how are you specifying number;s as hostname on /etc/hosts?

Is nslookup / ping / nsquery commands resolving for that hosts.??

Can you check as,

nslookup 35
or ping 1433
or nsquery hosts 1265 "files"

there? Is it working there.

Can you post your /etc/hosts file here. I hope it won't work there for inetd.sec file too.

Without resolvation of hostname, how we can control it via inetd.sec file?

[Bharat Katkar]

HQS4500,

It's seems u r new to forum. So see the link below on point assignments. Based on the relevance of the replies you have to assign points on the scale 1-10...10 being the best response.
http://forums1.itrc.hp.com/service/forums/helptips.do?admit=716493758+1085211538437+28353475#33

Keep forumming and you will find this place more interesting.

Regards,