Securing /etc/inetd.conf /etc/services + simple question

[Daniel Simard]

Hi!
I am currently working on securing my /etc/inetd.conf file and /etc/service. Here are my little questions.

Could you give me the best url for a list of ALL ports/services and their functionality (if we need them opened or not).

Also, I was wondering if you could tell me what the following service does.

registrar stream tcp nowait root /etc/opt/resmon/lbin/registrar /etc/opt/resmon/lbin/registrar

I see tons and tons of registrar entries in my syslog and I was wondering if I can simply disable this service. Is this service needed for EMS to work ?

[Paula J Frazer-Campbell · Accepted solution]

Hi

Ports here:-

http://www.opendoor.com/doorstop/ports.html

Have a look at ems setup - are there any errors with this entry in syslog?

Paula

[Paula J Frazer-Campbell]

Sorry that ports list was mac biased.

[James R. Ferguson]

Hi Daniel:

You can gain quite a bit of insight into ports and services that can be disabled (notably the "little TCP" services like 'echo', 'chargen', etc. by reading this classic whitepaper:

http://www.hp.com/products1/unix/operating/infolibrary/whitepapers/building_a_bastion_host.pdf

As for 'registrar', it is a part of EMS.

Regards!

...JRF...

[Paula J Frazer-Campbell]

Port numbers here:-

http://www.iana.org/assignments/port-numbers


James -- registrar in syslog ? some thing I havent seen.

Paula

[S.K. Chan]

I'll answer the "registrar" related question. Leave it on if you're enabling EMS to monitor your system hardware. If you disable it, you'll have problem with EMS, that is you may not get notified if EMS sees any hardware problem. I've seen it EMS broke because this was commented in inetd.conf. How do these logged entries looked like in your syslog.log ?

[Sridhar Bhaskarla]

Hi,

Whenever a query is made to view the resources configured under EMS, registrar is used to report the information. For ex.,

$resls /system/status/cpu/lpmc
contacting Registrar on xxxxxxx
..
.


If you are using EMS monitors inside ServiceGuard, then do not disable this service.

-Sri